Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-22210

Extension - hikashop.com - SQL injection in Hikashop component version 3.3.0 - 5.1.4 for Joomla

Description

A SQL injection vulnerability in the Hikashop component versions 3.3.0-5.1.4 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the category management area in backend.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

hikashop.com Hikashop component for Joomla

Default version status: unaffected

  • 3.3.0-5.1.4affected

References