CVE-2019-25762

HIGH 7.5CVE-2019-25762 · Published 19/06/2026 · updated 21/08/2026

In short

CVE-2019-25762 is a HIGH (CVSS 7.5) vulnerability affecting joomproject (joomboost).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
joomproject joomboost	`= 1.1.3.2`	No fix yet

Description

Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive user data by exploiting the projects endpoint. Attackers can send requests to index.php with option=com_jpprojects&view=projects&tmpl=component&format=json parameters to retrieve user IDs, names, and email addresses in JSON format.

References

joomboost.com · Product
extensions.joomla.org/extensions/extension/clients-a-communities/project-a-task-management/joomproject · Product
exploit-db.com/exploits/46121 · Exploit
vulncheck.com/advisories/joomla-component-joomproject-information-disclosure · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free