SQL Injection in Dj-Extensions.com Dj-Flyer Component For Joomla

CVE-2025-50127

A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands.

Vulnerability class: SQL Injection

EPSS: 0.003 (22.8th percentile) — read the EPSS interpretation.