CVE-2017-15946

9.8 criticalEPSS 1.1%

In the com_tag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the `tag` parameter to index.php. The request method to execute is GET.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2017-10-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

selfget:tag_meta

References

http://www.securityfocus.com/bid/101942
https://www.vulnerability-lab.com/get_content.php?id=2061
http://www.securityfocus.com/bid/101942
https://www.vulnerability-lab.com/get_content.php?id=2061

Check your stack JSON