← Back

Joomcode

joomcode

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Jcdashboard
jcdashboard
Jc Tables
jc_tables

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Joomcode
1Jc Tables
Oct 6, 2026
Sep 30, 2026
10.0 CRITICAL· v4
9.1 CRITICAL· v3
N/A· v2
Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any tas...Show more
Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request parameters and concatenated into SQL queries, allowing SQLi for reading and writing queries.Show less
1Joomcode
1Jcdashboard
Jun 17, 2026
Dec 14, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Unauthenticated LFI/SSRF in JCDashboards component for Joomla.