CVE-2018-6577: Jextn Membership

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

SQL Injection exists in the JEXTN Membership 3.1.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscriptions request.

Affected products

• Jextn Membership: version 3.1.0 only

Published 2018-02-02. Last modified 2026-06-17.