joomcode.com vulnerabilities

Products

• JCDashboards component for Joomla 1
• JCTables extension for Joomla 1

Latest joomcode.com CVEs

Newest publication first

1. CVE-2026-76570 Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1

   Published 2026-09-30

   Critical·CVSS 10.0

   Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly f...

2. CVE-2023-40630 Extension - joomcode.com - Unauthenticated LFI/SSRF in JCDashboards component for Joomla 1.0.0-1.1.30

   Published 2023-12-14

   Critical·CVSS 9.8

   Unauthenticated LFI/SSRF in JCDashboards component for Joomla.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.