8.5
/ 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Description
A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands.
Basic Information
ID
CVE-2025-54474
Source
Joomla
Published
Aug 15, 2025 at 11:54
Affected Product
Vendor
dj-extensions.com
Product
DJ-Classifieds component for Joomla
Version
3.9.2-3.10.1
Affected Versions
dj-extensions.com DJ-Classifieds component for Joomla 3.9.2-3.10.1