title: Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2
description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.
problem types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
affected:
{
collectionURL: https://extensions.joomla.org/extension/hikashop/
defaultStatus: unaffected
packageName: com_hikashop
product: HikaShop component for Joomla
vendor: hikashop.com
versions:
status: affected, version: 4.0.0-4.7.2
}