← All advisories

Critical severity9.8NVD Advisory· Published Aug 7, 2023· Updated Jun 17, 2026

CVE-2023-38044

CVE-2023-38044

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Joomla/HikaShopllm-create
Range: from 4.4.1 to 4.7.2
hikashop.com/HikaShop component for Joomlav5
Range: 4.0.0-4.7.2

Patches

Vulnerability mechanics

References

2

extensions.joomla.org/vulnerable-extensions/resolved/hikashop-versions-from-4-4-1-to-4-7-2-are-affected-sql-injection/nvdThird Party Advisory
www.hikashop.com/support/documentation/56-hikashop-changelog.htmlnvdRelease Notes

News mentions

0

No linked articles in our index yet.