Vulnerabilities > Jextn > Jextn Question AND Answer

DATE CVE VULNERABILITY TITLE RISK
2017-12-27 CVE-2017-17871 SQL Injection vulnerability in Jextn Question and Answer 3.1.0
The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter.
network
low complexity
jextn CWE-89
critical
9.8