CVE-2025-22211

LOW

JoomShopping <1.4.3 - SQL Injection

Title source: llm

Description

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the country management area in backend.

References (2)

Core 2

Core References

Product product

https://www.webdesigner-profi.de/

Exploit third-party-advisory

https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22211

View Exploit ZIP pw:eip

Scores

CVSS v3 3.4

EPSS 0.0001

EPSS Percentile 0.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-89

Status published

Products (1)

webdesigner-profi/joomshopping 1.0.0 - 1.4.3

Published Feb 25, 2025

Tracked Since Feb 18, 2026