CVE-2026-35222

CriticalCVSS 9.8

Published: 26/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.

An attacker can exploit this vulnerability to gain unauthorized access to the database, steal or modify data.

Update the CMS to a version containing a fix for this component and implement input validation.

Original NVD description (English source)

Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.