SQL Injection in Joomla! Project Cms
CVE-2025-22207
Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of com_scheduler.
Vulnerability class: SQL Injection
EPSS: 0.004 (35.5th percentile) — read the EPSS interpretation.
Affected products
- Joomla! Project Cms — versions 4.1.0-4.4.10, 5.0.0-5.2.3
Weakness classification (CWE)
References
- security@joomla.org (vendor-advisory)