Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

JoomSport – for Sports: Team & League, Football, Hockey & more — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in JoomSport – for Sports: Team & League, Football, Hockey & more, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE IDTitleCVSSSeverityPublished
CVE-2026-11920 JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter CWE-89 4.9 Medium2026-08-05
CVE-2026-13010 JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute CWE-89 6.5 Medium2026-07-10
CVE-2026-12134 JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action CWE-862 4.3 Medium2026-07-02
CVE-2026-12133 JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action CWE-862 4.3 Medium2026-07-01
CVE-2026-6929 JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter CWE-89 7.5 High2026-05-13
CVE-2025-7721 JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion CWE-98 9.8 Critical2025-10-03
CVE-2024-12633 JoomSport <= 5.6.17 - Reflected Cross-Site Scripting via page CWE-79 7.1 High2025-01-07
CVE-2022-2718 JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby CWE-89 7.2 High2022-09-06
CVE-2022-2717 JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby CWE-89 7.2 High2022-09-06
CVE-2021-24384 JoomSport < 5.1.8 - Unauthenticated PHP Object Injection CWE-502 9.8 -2021-07-06

All 10 known CVE vulnerabilities affecting JoomSport – for Sports: Team & League, Football, Hockey & more with full Chinese analysis, references, and POCs where available.