CVE-2010-4838: Extensiondepot Com Jsupport

Medium severity, CVSS 6.0. EPSS: 0.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in the JSupport (com_jsupport) component 1.5.6 for Joomla! allows remote authenticated users, with Public Back-end permissions, to execute arbitrary SQL commands via the alpha parameter in a (1) listTickets or (2) listFaqs action to administrator/index.php.

Affected products

Published 2011-09-14. Last modified 2026-06-16.