CVE-2023-34476

CVE-2023-34476: Extension - mooj.org - SQLi in Proforms Basic component for Joomla <= 1.6.0

Vendor Mooj.org

Product Proforms Basic component for Joomla

Weakness CWE-89 · SQLi

Published August 7, 2023

Last update October 20, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.

Key dates

02Disclosure timeline

August 7, 2023 CVE published

October 20, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-34476 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html AskarLabs — CWE-89 write-up SQL Injection

Related vulnerabilities

04Related CVE

CVE-2026-59526 WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability CVE-2026-65526 WordPress Visualizer plugin <= 4.0.6 - SQL Injection vulnerability CVE-2026-11421 ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17.4 - Authenticated (Custom+) SQL Injection via 'erpadvancefilter' Parameter CVE-2026-15444 Tutor LMS <= 4.0.1 - Authenticated (Administrator+) SQL Injection via 'coupon_code' Parameter CVE-2026-65876 Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1