CVE-2013-3932: Jomres

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php.

Affected products

• Jomres Jomres: before 7.3.1 (fixed in 7.3.1)

Published 2020-01-02. Last modified 2026-06-16.