What is GHSA-qq9x-p9f6-rmg7?

GHSA-qq9x-p9f6-rmg7 is a security advisory published by GitHub Security Advisories with High severity. Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows...

Which CVE IDs does GHSA-qq9x-p9f6-rmg7 cover?

GHSA-qq9x-p9f6-rmg7 covers the following CVE IDs: CVE-2017-20273. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qq9x-p9f6-rmg7?

GHSA-qq9x-p9f6-rmg7 has a CVSS v3 base score of 8.2, published by GitHub Security Advisories.

GHSA-qq9x-p9f6-rmg7HighCVSS 8.2

Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows...

Vendor

GitHub Security Advisories

Published

June 19, 2026

Last Modified

June 19, 2026

🔗 CVE IDs covered (1)

CVE-2017-20273 →

📋 Description

Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_registrationpro&view=category&id parameter containing SQL injection payloads to extract sensitive database information.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-20273
https://www.exploit-db.com/exploits/42416
https://www.vulncheck.com/advisories/joomla-event-registration-pro-calendar-sql-injection
https://github.com/advisories/GHSA-qq9x-p9f6-rmg7