CVE Catalog
CVE-2026-105604
CriticalCVSS 9.3Summary
The Joomla DJ-Classifieds extension before 3.11.3 is vulnerable to an unauthenticated SQL injection in the frontend search.
Risk Assessment
An unauthenticated attacker can execute arbitrary SQL queries, potentially leading to data disclosure, modification, or deletion.
Recommendation
Update DJ-Classifieds to version 3.11.3 or later and restrict access to the search functionality if necessary.
Other vulnerabilities in Joomla DJ-Classifieds
Original NVD description (English source)
Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in the frontend search.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS