8.5
/ 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Description
A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands.
Basic Information
ID
CVE-2025-50127
Source
Joomla
Published
Jul 23, 2025 at 11:14
Modified
Jul 24, 2025 at 04:41
Affected Product
Vendor
dj-extensions.com
Product
DJ-Flyer component for Joomla
Version
1.0-3.2
Affected Versions
dj-extensions.com DJ-Flyer component for Joomla 1.0-3.2