CVE-2020-19447: Jdownloads

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.

Affected products

• Jdownloads Jdownloads: version 3.2.63 only

Published 2020-09-24. Last modified 2026-06-17.