Medium
CVE-2026-11920
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters
Medium
CVE-2026-13010
JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute
Medium
CVE-2026-12134
JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action
Medium
CVE-2026-12133
JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action
High
CVE-2026-6929
JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter
High
CVE-2026-42647
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.7.7 - Unauthenticated SQL Injection
Critical
CVE-2025-7721
JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion
High
CVE-2024-12633
JoomSport <= 5.6.17 - Reflected Cross-Site Scripting via page
Medium
CVE-2024-44031
JoomSport <= 5.6.3 - Missing Authorization
Medium
CVE-2024-43355
JoomSport <= 5.3.0 - Missing Authorization
Critical
CVE-2022-4050
JoomSport <= 5.2.7 - Unauthenticated SQL Injection
High
CVE-2022-2718
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby
High
CVE-2022-2717
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby
Critical
CVE-2021-24384
JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.1.7 - Object Injection
Critical
CVE-2019-14348
JoomSport – for Sports: Team & League, Football, Hockey & more < 3.4 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.