Findings

CVE-2026-35222

Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.

Published May 26, 2026 · updated Jul 24, 2026 · joomla joomla!

Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. May 26, 2026 · NIST NVD

    Detected

    Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.

  2. Jul 24, 2026 · NIST NVD

    Updated

    Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.

Affected

  • cpe joomla/joomla!version unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-35222

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-35222

    Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.

    nvd.nist.gov

References

CVE-2026-35222 · ZeroDay Findings