CVE-2026-78072: JEFFERSON49 Sexy Polling Reloaded Extension For Joomla

High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - Jefferson49 - Unauthenticated blind SQLi in Sexy Polling Reloaded < 5.6.1

Affected products

• JEFFERSON49 Sexy Polling Reloaded Extension For Joomla: version 1.0.0-5.6.0 only

Published 2026-08-28. Last modified 2026-08-28.