CVE-2025-22207

[20250201] - Core - SQL injection vulnerability in Scheduled Tasks component PUBLISHED

Description (CNA)

Improperly built order clauses lead to a SQL injection vulnerability in the backend task list of com_scheduler.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 4.1.0-4.4.10; affected 5.0.0-5.2.3

CWE-89

CISA-ADP

No English description supplied.

No references supplied.