critical9.3
CVE-2025-54294
A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered.
Impact
A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.