CVE-2026-105604

Description

Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in the frontend search.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-105604 ↗
• dj-extensions.com/dj-classifieds ↗

Related CVEs

• CVE-2026-116769Absolute Security / Secure AccessCVSS 9.3
• CVE-2026-102435themefic / Ultra Addons for Contact Form 7CVSS 9.8
• CVE-2026-105606joomlaboat.com / Custom Tables extension for JoomlaCVSS 9.5
• CVE-2026-105603dj-extensions.com / DJ-Classifieds extension for JoomlaCVSS 9.4
• CVE-2026-119085AWS / virtual-engineering-workbenchCVSS 9.4
• CVE-2026-88811SUSE / RancherCVSS 9.1
• CVE-2026-61900dj-extensions.com / jDownloads extension for JoomlaCVSS 10.0
• CVE-2026-61424dj-extensions.com / DJ-Classifieds extension for JoomlaCVSS 10.0