Low · 3.4 CVE-2025-22211 EUVD-2025-5304GHSA-rjgv-6mwj-prq2

Extension - webdesigner-profi.de - SQL injection in JoomShopping component version 1.0.0 - 5.5.5 for Joomla

Published Feb 25, 2025 · Updated Mar 4, 2025 · Assigned by Joomla

Vendor: webdesigner-profi.de Product: JoomShopping component for Joomla Category: Web / CMS

Description

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the country management area in backend.

Affected products

Vendor	Product	Affected	Fixed
webdesigner-profi.de	JoomShopping component for Joomla	1.0.0-1.4.3	—

References

https://www.webdesigner-profi.de/ product
https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22211 third-party-advisory