CVE-2018-6609: Jsp Tickets Project Jsp Tickets

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

SQL Injection exists in the JSP Tickets 1.1 component for Joomla! via the ticketcode parameter in a ticketlist edit action, or the id parameter in a statuslist (or prioritylist) edit action.

Affected products

• Jsp Tickets Project Jsp Tickets: version 1.1 only

Published 2018-02-05. Last modified 2026-06-17.