Medium · 6.9 CVE-2026-21630 EUVD-2026-17855

Joomla! Core - [20260302] - SQL injection in com_content articles webservice endpoint

Published Apr 1, 2026 · Updated Apr 1, 2026 · Assigned by Joomla

Description

Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint.

Vendor	Product	Affected	Fixed
Joomla! Project	Joomla! CMS	4.0.0-5.4.3, 6.0.0-6.0.3	—