PT-2025-7929 · Unknown · Joomshopping

Adam Wallwork · Published 2025-02-25 · Updated 2025-04-09 · CVE-2025-22211

Positive Technologies (AI Summary)

CVSS v3.1

3.4

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions JoomShopping component versions 1.0.0 through 1.4.3

Description A SQL injection issue in the country management area of the backend allows authenticated attackers with administrator privileges to execute arbitrary SQL commands.

Recommendations For JoomShopping component versions 1.0.0 through 1.4.3, update to a version that contains a fix for this issue to prevent exploitation.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-22211

Affected Products

Joomshopping

References · 9

• 🔥 https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22211 · Exploit
• https://osv.dev/vulnerability/CVE-2025-22211 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-22211 · Security Note
• https://t.me/cvenotify/112527 · Telegram Post
• https://twitter.com/CVEnew/status/1894516018917315006 · Twitter Post
• https://t.me/cvedetector/18935 · Telegram Post
• https://twitter.com/dailycve/status/1910004757285994515 · Twitter Post
• https://t.me/cvenotify/113151 · Telegram Post
• https://webdesigner-profi.de · Note