CVE-2023-23753

Critical

Description

The 'Visforms Base Package for Joomla 3' extension is vulnerable to SQL Injection as concatenation is used to construct an SQL Query. An attacker can interact with the database and could be able to read, modify and delete data on it.

SeverityCritical

CVSS9.8

Exploit probability—

ProductVi-solutions Visforms

PublishedApr 23, 2023

First seenApr 23, 2023

Weakness typeCWE-89SQL injection

How to fix

Update

vi-solutions visforms3.0.5 or later

Vendor advisories

vi-solutions.de/en/announcements/867-security-announcement-cve-2023-23754

Affected products

Product	Affected versions	Fixed in
vi-solutions visforms	3.0.0 ≤ v < 3.0.5	3.0.5

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.