Critical severity9.8NVD Advisory· Published Jun 28, 2026· Updated Jun 30, 2026
CVE-2026-49048
CVE-2026-49048
Description
The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter into the query string without escaping or parameterisation.
Affected products
2Patches
Vulnerability mechanics
References
1- www.joomcoder.comnvdProduct
News mentions
0No linked articles in our index yet.