← Back to home
CVE-2025-26855
CWE-89: Improper Neutralization of Special Elements used in an SQL Command
Published: July 18, 2025
View on NVD →
Description
A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands.
Affected Products
| Vendor | Product | Versions Affected |
|---|---|---|
| joomcar.net | Articles Calendar extension for Joomla | 1.0.0-1.0.1.0007 (affected) |
Credits / Discoverer
- Kamil Szczurowski
- Robert Kruczek