Security Advisory

CVE-2026-76602

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-22 14:21:28

Last updated 2026-08-23 10:46:55

Assigner Joomla

CVSS score 9.3

State PUBLISHED

Description

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2 - The order parameter in list models is used in queries without validation, allowing read SQLi vectors.

← Browse all CVEs View on cve.org ↗