Vulnerabilities (CVE)

Filtered by vendor Cwjoomla Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-14592 1 Cwjoomla 2 Cw Article Attachments Free, Cw Article Attachments Pro 2024-02-28 7.5 HIGH 9.8 CRITICAL
The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php.
CVE-2018-7313 1 Cwjoomla 1 Cw Tags 2024-02-28 7.5 HIGH 9.8 CRITICAL
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter.