VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 16, 2020· Updated Jun 17, 2026

CVE-2020-10243

CVE-2020-10243

Description

An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend menutype.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Joomla/Joomla!2 versions
    cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*range: >=1.7.0,<3.9.16
    • (no CPE)range: <3.9.16
  • Joomla!/Joomla!description
  • osv-coords
    pkg:bitnami/joomla
    Range: >= 1.7.0, < 3.9.16

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.