CVE-2026-35221
Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.
Published May 26, 2026 · updated Jul 24, 2026 · joomla joomla!
Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
May 26, 2026 · NIST NVD
Detected
Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.
Jul 24, 2026 · NIST NVD
Updated
Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.
Affected
- cpe joomla/joomla!version unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-35221
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-35221
Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.
nvd.nist.gov