CVE-2020-22274
CRITICALJomSocial 4.7.6 - CSV Injection via Customer Profile
Title source: llmDescription
JomSocial (Joomla Social Network Extention) 4.7.6 allows CSV injection via a customer's profile.
References (3)
Core 3
Core References
Broken Link x_refsource_misc
https://gofile.io/?c=LsAOtL
Third Party Advisory x_refsource_misc
http://uploadboy.me/iypl38958pon/JomSocial.mp4.html
Third Party Advisory x_refsource_misc
https://cert.ikiu.ac.ir/public-files/news/document/CVE-99/CVE-2020-22274.pdf
Scores
CVSS v3
9.8
EPSS
0.0161
EPSS Percentile
72.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-1236
Status
published
Products (1)
jomsocial/jomsocial
4.7.6
Published
Nov 04, 2020
Tracked Since
Feb 18, 2026