Unscored CVE-2022-23797 EUVD-2022-28731GHSA-72pc-jmmj-xpw5

[20220305] - Core - Inadequate filtering on the selected Ids

Published Mar 30, 2022 · Updated Feb 25, 2026 · Assigned by Joomla

Vendor: Joomla! Project Product: Joomla! CMS Category: Web / CMS

Description

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate filtering on the selected Ids on an request could resulted into an possible SQL injection.

Affected products

Vendor	Product	Affected	Fixed
Joomla! Project	Joomla! CMS	3.0.0-3.10.6 & 4.0.0-4.1.0	—

References

https://developer.joomla.org/security-centre/874-20220305-core-inadequate-filtering-on-the-selected-ids.html vendor-advisory