CVE-2026-35221

Joomla! Core - [20260506] - Authenticated blind SQLi in com_finder PUBLISHED

Description (CNA)

Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 6.0.0-6.1.0; affected 5.4.0-5.4.5

CWE-89

CISA-ADP

No English description supplied.

No references supplied.