CVE-2017-15965: Nswd Ns Download Shop

Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days.

The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action.

Affected products

• Nswd Ns Download Shop: version 2.2.6 only

Published 2017-10-29. Last modified 2026-06-17.