CVE-2026-105604

CVSS 9.3 (critical) · published 2026-11-02

Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in the frontend search.

Weakness: CWE-89

Source: NVD CVE-2026-105604

References

• https://dj-extensions.com/dj-classifieds

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.