Description Improperly validated order clauses lead to a SQL injection vulnerability in com_tags. Remediation References CVE-2026-35222 Related Vulnerabilities Oracle Database Server Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-21174) TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-3664) PHP Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2024-11234) WordPress Plugin Plugin Central Multiple Cross-Site Scripting Vulnerabilities (2.5) WordPress Plugin Awesome Studio Cross-Site Scripting (1.0.7) Severity Critical Classification CVE-2026-35222 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities