CVE-2018-6581: Joommasters Jms Music

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter.

Affected products

• Joommasters Jms Music: version 1.1.1 only

Published 2018-02-02. Last modified 2026-06-17.