SQL Injection in Joomla! Project Cms
CVE-2026-21630
Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint.
Vulnerability class: SQL Injection
EPSS: 0.000 (0.0th percentile) — read the EPSS interpretation.
Affected products
- Joomla! Project Cms — versions 4.0.0-5.4.3, 6.0.0-6.0.3