PatchSiren

Joombooking CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Joombooking CVE published 2026-06-19

CVE-2017-20255

CVE-2017-20255 is a SQL injection vulnerability in Joomla! Component JB Visa 1.0. Unaffected product versions are unknown. The vulnerability allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the visatype parameter in GET requests to index.php with option=com_bookpro and view=popup parameters. This vulnerability has a CVSS score of 8.8, indicating high se [truncated]