Skip to contentBeardev Joomsport – For Sports: Team & League, Football, Hockey & More vulnerabilities
- beardev joomsport – for sports: team & league, football, hockey & moreJoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode AttributeCVE-2026-1186986.5 Medium
- beardev joomsport – for sports: team & league, football, hockey & moreJoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode AttributeCVE-2026-1181926.5 Medium
- beardev joomsport – for sports: team & league, football, hockey & moreJoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' ParameterCVE-2026-119204.9 Medium
- beardev joomsport – for sports: team & league, football, hockey & moreJoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode AttributeCVE-2026-130106.5 Medium
- beardev joomsport – for sports: team & league, football, hockey & moreJoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX actionCVE-2026-121344.3 Medium
- beardev joomsport – for sports: team & league, football, hockey & moreJoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX actionCVE-2026-121334.3 Medium
- beardev joomsport – for sports: team & league, football, hockey & moreJoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' ParameterCVE-2026-69297.5 High
- beardev joomsport – for sports: team & league, football, hockey & moreJoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File InclusionCVE-2025-77219.8 Critical
- beardev joomsport – for sports: team & league, football, hockey & moreJoomSport <= 5.6.17 - Reflected Cross-Site Scripting via pageCVE-2024-126337.1 High
- beardev joomsport, joomsport – for sports: team & league, football, hockey & more +1 moreJoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderbyCVE-2022-27187.2 High
- beardev joomsport, joomsport – for sports: team & league, football, hockey & more +1 moreJoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderbyCVE-2022-27177.2 High
- beardev joomsport, joomsport – for sports: team & league, football, hockey & more +1 moreJoomSport < 5.1.8 - Unauthenticated PHP Object InjectionCVE-2021-243849.8 Critical