Skip to content

CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-35222

Joomla! Core - [20260507] - Authenticated blind SQLi in com_tags

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-05-26
Updated: 2026-06-05
Assigning organization: Joomla

Description

Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Joomla! Project Joomla! CMS

Default version status: unaffected

6.0.0-6.1.0affected
4.0.0-5.4.5affected

References

https://developer.joomla.org/security-centre/1039-20260507-core-authenticated-blind-sqli-in-com-tags.html ↗