CVE-2019-9918

9.1 criticalEPSS 1.3%

Critical (9.1) in harmistechnology je messenger. EPSS 1.3% chance of exploitation in the next 30 days.

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2019-03-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

harmistechnology:je_messenger

References

https://extensions.joomla.org/extension/je-messenger/
https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9918.md
https://extensions.joomla.org/extension/je-messenger/
https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9918.md

Check your stack JSON