BearDev JoomSport – for Sports: Team & League, Football, Hockey & more

• CVE-2026-118698 Medium 6.5 JoomSport <= 5.7.14 - Authenticated (Contributor+) SQL Injection via 'pgroup' Shortcode Attribute 0.3%
• CVE-2026-118192 Medium 6.5 JoomSport <= 5.7.11 - Authenticated (Contributor+) SQL Injection via 'team_id' Shortcode Attribute 0.4%
• CVE-2026-11920 Medium 4.9 JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order' Parameter 0.5%
• CVE-2026-13010 Medium 6.5 JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' Shortcode Attribute 0.4%
• CVE-2026-12134 Medium 4.3 JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Creation/Modification via season_groupedit AJAX action 0.4%
• CVE-2026-12133 Medium 4.3 JoomSport <= 5.7.8 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Group Deletion via season_groupdel AJAX action 0.4%
• CVE-2026-6929 High 7.5 JoomSport <= 5.7.7 - Unauthenticated SQL Injection via 'sortf' Parameter 0.3%
• CVE-2025-7721 Critical 9.8 JoomSport <= 5.7.3 - Unauthenticated Directory Traversal to Local File Inclusion 0.7%
• CVE-2024-12633 High 7.1 JoomSport <= 5.6.17 - Reflected Cross-Site Scripting via page 0.3%
• CVE-2022-2718 High 7.2 JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authenticated (Admin+) SQL Injection via orderby 1.5%
• CVE-2022-2717 High 7.2 JoomSport – for Sports: Team & League, Football, Hockey & more <= 5.2.5 - Authentciated (Admin+) SQL Injection via orderby 1.5%