| Package | Affected versions | Patched versions |
|---|---|---|
| joomla! | ≥ 3.5.0, ≤ 3.8.5 |
In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free