CVE-2023-23753

Extension - vi-solutions - Visforms Base Package for Joomla 3

State: Published
Severity: 9.8 Critical
Published: Apr 23, 2023
Updated: Feb 6, 2025
Reserved: Jan 17, 2023

Description

The 'Visforms Base Package for Joomla 3' extension is vulnerable to SQL Injection as concatenation is used to construct an SQL Query. An attacker can interact with the database and could be able to read, modify and delete data on it.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Affected Products

Product	Versions
Visforms Base Package for Joomla 3vi-solutions	3.0.4Affected 3.0.5Not affected

References

https://vi-solutions.de/en/announcements/867-security-announcement-cve-2023-23754vendor-advisory
https://blog.asturhackers.es/sql-injection-en-visforms-base-package-for-joomla-3-0-5-cve-2023-23753third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.