Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-21630

No fix known EPSS <1%CVSS 6.9

Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint.

Published 2026-04-01 · CVE record · OSV

Products: Joomla! Project Joomla! CMS