CVE-2015-7342

Name of the Vulnerable Software and Affected Versions: JNews Joomla Component versions prior to 8.5.0

Description: The issue allows SQL injection via several fields, including upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field.

Recommendations: For versions prior to 8.5.0, update to version 8.5.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the upload thumbnail, Queue Search Field, Subscribers Search Field, and Newsletters Search Field to minimize the risk of exploitation.