CVE-2025-22211: Webdesigner-Profi Joomshopping

Low severity, CVSS 3.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A SQL injection vulnerability in the JoomShopping component versions 1.0.0-1.4.3 for Joomla allows authenticated attackers (administrator) to execute arbitrary SQL commands in the country management area in backend.

Affected products

• Webdesigner-Profi Joomshopping: from 1.0.0, up to and including 1.4.3

Published 2025-02-25. Last modified 2026-06-17.