CVE Catalog
CVE-2026-35221
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.32%
24th percentile - higher than 24% of all known CVEs
Summary
Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.
Risk Assessment
An attacker can exploit this vulnerability to gain unauthorized access to the database, steal or modify data.
Recommendation
Update the CMS to a version containing a fix for this component and implement input validation.
Original NVD description (English source)
Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.