CVE-2026-78080

Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0 - The cid parameter is used in queries without validation, allowing SQLi vectors.

Score

CVSS 4.0 9.3 Critical

Status

Deferred - security@joomla.org

Published

2026-09-03

Last modified

2026-09-03

Weaknesses

CWE-89

Affected products

• Joodatabase Lite Extension For Joomla (Joodb.feenders.de)

References

• https://joodb.feenders.de/