Medium · 6.7 CVE-2025-22207 EUVD-2025-4794GHSA-g9x3-9xx6-xv2w

[20250201] - Core - SQL injection vulnerability in Scheduled Tasks component

Published Feb 18, 2025 · Updated Feb 18, 2025 · Assigned by Joomla

Description

Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of com_scheduler.

Vendor	Product	Affected	Fixed
Joomla! Project	Joomla! CMS	4.1.0-4.4.10, 5.0.0-5.2.3	—