{"affected":[{"defaultStatus":"unaffected","product":"DJ-Classifieds extension for Joomla","source":"CNA: Joomla","vendor":"dj-extensions.com","versions":[{"status":"affected","version":"1.0-3.11.2"}]}],"cveId":"CVE-2026-105604","cwes":["CWE-89"],"description":"Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in the frontend search.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":9.3,"severity":"critical","source":"CNA: Joomla","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793648817619,"publishedAt":1793644034810,"references":[{"source":"CNA: Joomla","tags":["product"],"url":"https://dj-extensions.com/dj-classifieds"}],"remediation":[],"revision":"ae684c06710085602c3ef84d30552a90b453b478e01c7ae4205e0be85128aa12","sources":[{"modifiedAt":1793648817619,"name":"CNA: Joomla","retrievedAt":1793650154605,"url":"https://www.cve.org/CVERecord?id=CVE-2026-105604"}],"ssvc":{"assessedAt":1793646031584,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3","updatedAt":1793650154605}