Vulnerabilities (CVE)

Filtered by vendor Joomcode Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-76570 1 Joomcode 1 Jc Tables 2026-10-06 N/A 9.1 CRITICAL
Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request parameters and concatenated into SQL queries, allowing SQLi for reading and writing queries.
CVE-2023-40630 1 Joomcode 1 Jcdashboard 2026-06-17 N/A 9.8 CRITICAL
Unauthenticated LFI/SSRF in JCDashboards component for Joomla.