CVE-2020-19455

Name of the Vulnerable Software and Affected Versions Joomla! jdownloads version 3.2.63

Description A SQL injection issue exists in the jdownloads component for Joomla! via the filter order parameter in the order function of components/com jdownloads/helpers/categories.php.

Recommendations For version 3.2.63, consider restricting access to the vulnerable categories.php file until a patch is available. As a temporary workaround, avoid using the filter order parameter in the affected API endpoint until the issue is resolved.