Paper/Archive/CVE-2026-76570

CVE-2026-76570

joomcode.com JCTables extension for Joomla — Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1

EPSS 0.5%CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 39.9.399 × 208.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The front-end CRUD API controller performs no Joomla token validation and no authentication check on any task. Table names, column names, and values are taken directly from request parameters and concatenated into SQL queries, allowing SQLi for reading and writing queries.

Affected

ProductAffectedFixed inSource

JCTables extension for Joomla1.0.0-1.20.0–CNA

Scores by source

Joomla (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refjoomcode.com writeupvulncheck.com/blog/jctables-unauthenticated-sql-rw-to-rce