CriticalCVSS 9.8
EPSS 3.3%
SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter.