Smart Related Articles Project Smart Related Articles
3 CVEs affecting Smart Related Articles Project Smart Related Articles. Latest disclosed: 2017-04-13. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7628 | Critical | 9.8 | 2017-04-13 | The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this v… |
CVE-2017-7626 | Medium | 6.1 | 2017-04-13 | The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method). |
CVE-2017-7627 | Medium | 5.3 | 2017-04-13 | The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missing _JEXEC check). |