Description
In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view.
Remediation
References
Related Vulnerabilities
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-2643)
Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-2986)
WordPress Plugin Poll, Survey, Questionnaire and Voting system SQL Injection (1.2.4)
WordPress Plugin Custom Post Type Relations Cross-Site Scripting (1.0)
XWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-29208)