CVE-2019-25762CWE-359

CVE-2019-25762

High · published June 19, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
50.6
In the wild
Unconfirmed
What it is

Joomla! Component JoomProject 1.1.3.2 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive user data by exploiting the projects endpoint. Attackers can send requests to index.php with option=com_jpprojects&view=projects&tmpl=component&format=json parameters to retrieve user IDs, names, and email addresses in JSON format.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00658 · 50.6th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2026-06-19T22:16Z
Affected products (1)
ProductVersionsFixed in
joomboost/joomprojectall versions—
References (4)
http://joomboost.com/ · [email protected]https://extensions.joomla.org/extensions/extension/clients-a-communities/project-a-task-management/joomproject/ · [email protected]https://www.exploit-db.com/exploits/46121 · [email protected]https://www.vulncheck.com/advisories/joomla-component-joomproject-information-disclosure · [email protected]
EPSS history
Timeline
  • 19 JUN 17:48Z
    Joomla! Component JoomProject 1.1.3.2 Information Disclosure
    cvelistv5