Critical severityNVD Advisory· Published Sep 30, 2026· Updated Sep 30, 2026
CVE-2026-76570
CVE-2026-76570
Description
Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request parameters and concatenated into SQL queries, allowing SQLi for reading and writing queries.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=1.21.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.