Critical severity9.8NVD Advisory· Published Apr 23, 2023· Updated Jun 17, 2026

CVE-2023-23753

Description

The 'Visforms Base Package for Joomla 3' extension is vulnerable to SQL Injection as concatenation is used to construct an SQL Query. An attacker can interact with the database and could be able to read, modify and delete data on it.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Joomla/Visforms Base Package for Joomla 3llm-create
Visforms/Visforms Base Package for Joomla 3llm-create
Vi Solutions/Visforms Base Package For Joomla 3v5
Range: 3.0.4

Patches

Vulnerability mechanics

References

blog.asturhackers.es/sql-injection-en-visforms-base-package-for-joomla-3-0-5-cve-2023-23753nvdExploit
vi-solutions.de/en/announcements/867-security-announcement-cve-2023-23754nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000