CVE-2026-49048
Joomla Extension - joomcoder.com - Unauthenticated SQL Injection in JoomCCK extension for Joomla < 6.4.1
CVSS Score
9.8
EPSS Score
0.3%
EPSS Percentile
20th
The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter into the query string without escaping or parameterisation.
| CWE | CWE-89 |
| Vendor | joomcoder.com |
| Product | joomcck extension for joomla |
| Published | Jun 28, 2026 |
| Last Updated | Jun 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for joomcoder.com joomcck extension for joomla
Be the first to know when new critical vulnerabilities affecting joomcoder.com joomcck extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
joomcoder.com / JoomCCK extension for Joomla
1.0-6.4.0
Credits
Kamil Soltanov