critical9.8
CVE-2019-19846
In Joomla!
Impact
In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 2.5.0 through 3.9.14 |