What is CVE-2025-22211?

CVE-2025-22211 is a low-severity vulnerability in Webdesigner-Profi Joomshopping, classified under SQL Injection. CVSS score: 3.4/10. Published 2025-02-25.

How severe is CVE-2025-22211?

Low severity. CVSS v3 base score is 3.4 out of 10.

SQL Injection in Webdesigner-Profi Joomshopping

CVE-2025-22211

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the country management area in backend.

Vulnerability class: SQL Injection

EPSS: 0.004 (27.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.4 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N.

Affected products

Webdesigner-profi Joomshopping
Webdesigner-profi.de Joomshopping Component For Joomla — versions 1.0.0-1.4.3

Weakness classification (CWE)

CWE-89 — SQL Injection

References

security@joomla.org (Product, product)
security@joomla.org (Exploit, third-party-advisory)

Frequently asked questions

What is CVE-2025-22211?: CVE-2025-22211 is a low-severity vulnerability in Webdesigner-Profi Joomshopping, classified under SQL Injection. CVSS score: 3.4/10. Published 2025-02-25.
How severe is CVE-2025-22211?: Low severity. CVSS v3 base score is 3.4 out of 10.