CVE-2018-6578: Jextn Je Paypervideo

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

SQL Injection exists in the JE PayperVideo 3.0.0 component for Joomla! via the usr_plan parameter in a view=myplans&task=myplans.usersubscriptions request.

Affected products

• Jextn Je Paypervideo: version 3.0.0 only

Published 2018-02-02. Last modified 2026-06-17.