Beardev

Joomsport

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-7721

  • EPSS 0.54%
  • Veröffentlicht 03.10.2025 11:17:11
  • Zuletzt bearbeitet 06.10.2025 14:56:47

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.7.3 via the task parameter. This makes it possible for unauthenticated attackers to ...

7.1

CVE-2024-12633

  • EPSS 0.81%
  • Veröffentlicht 07.01.2025 06:15:17
  • Zuletzt bearbeitet 07.01.2025 06:15:17

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page parameter in all versions up to, and including, 5.6.17 due to insufficient input sanitization and ou...

8.8

CVE-2024-44031

  • EPSS 0.47%
  • Veröffentlicht 01.11.2024 15:15:52
  • Zuletzt bearbeitet 08.11.2024 21:26:34

Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.6.3.

8.8

CVE-2024-43355

  • EPSS 0.29%
  • Veröffentlicht 01.11.2024 15:15:48
  • Zuletzt bearbeitet 13.11.2024 01:24:34

Missing Authorization vulnerability in BearDev JoomSport allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JoomSport: from n/a through 5.3.0.

9.8

CVE-2022-4050

Exploit
  • EPSS 84.43%
  • Veröffentlicht 19.12.2022 14:15:11
  • Zuletzt bearbeitet 17.04.2025 14:15:24

The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

4.9

CVE-2022-2717

  • EPSS 1.17%
  • Veröffentlicht 06.09.2022 18:15:14
  • Zuletzt bearbeitet 21.11.2024 07:01:34

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-events-form page in versions up to, and including, 5.2.5 due to insufficient escaping ...

4.9

CVE-2022-2718

  • EPSS 0.98%
  • Veröffentlicht 06.09.2022 18:15:14
  • Zuletzt bearbeitet 21.11.2024 07:01:34

The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-page-extrafields page in versions up to, and including, 5.2.5 due to insufficient esca...

9.8

CVE-2021-24384

Exploit
  • EPSS 4.46%
  • Veröffentlicht 06.07.2021 11:15:08
  • Zuletzt bearbeitet 21.11.2024 05:52:57

The joomsport_md_load AJAX action of the JoomSport WordPress plugin before 5.1.8, registered for both unauthenticated and unauthenticated users, unserialised user input from the shattr POST parameter, leading to a PHP Object Injection issue. Even tho...

9.8

CVE-2019-14348

Exploit
  • EPSS 37.56%
  • Veröffentlicht 05.08.2019 15:15:11
  • Zuletzt bearbeitet 21.11.2024 04:26:33

The BearDev JoomSport plugin 3.3 for WordPress allows SQL injection to steal, modify, or delete database information via the joomsport_season/new-yorkers/?action=playerlist sid parameter.