CVE-2017-17871: Jextn Question And Answer

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter.

Affected products

• Jextn Jextn Question And Answer: version 3.1.0 only

Published 2017-12-27. Last modified 2026-06-17.