CVE-2019-9184

9.8 criticalEPSS 9.0%

Critical (9.8) in j2store j2store. EPSS 9.0% chance of exploitation in the next 30 days.

SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 9.0% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2019-02-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

j2store:j2store

References

https://andreiconache.me/j2store-plugin-3-3-6-sql-injection/
https://www.exploit-db.com/exploits/46467/
https://www.j2store.org/blog/general/security-update-for-j2store.html
https://andreiconache.me/j2store-plugin-3-3-6-sql-injection/
https://www.exploit-db.com/exploits/46467/

Check your stack JSON