CVE-2026-35222

Joomla! Core - [20260507] - Authenticated blind SQLi in com_tags PUBLISHED

Description (CNA)

Improperly validated order clauses lead to a SQL injection vulnerability in com_tags.

Vendor / product	Versions
Joomla! Project / Joomla! CMS	affected 6.0.0-6.1.0; affected 4.0.0-5.4.5

CWE-89

CISA-ADP

No English description supplied.

No references supplied.