CVE-2016-1000120

HIGH

Huge IT catalog extension <1.0.4 - SQL Injection, XSS

Title source: llm

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

Core 3

Core References

Exploit, Vendor Advisory x_refsource_misc

Product x_refsource_misc

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

CVSS v3 7.2

EPSS 0.0210

EPSS Percentile 79.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89

Status published

Products (1)

huge-it/catalog 1.0.4

Published Oct 27, 2016

Tracked Since Feb 18, 2026