https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-9922.htmlhttps://patchthecve.com/cve/CVE-2019-9922.htmlWed, 17 Jun 2026 02:44:51 +0000HIGH 7.5: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files.https://patchthecve.com/cve/CVE-2019-9921.htmlhttps://patchthecve.com/cve/CVE-2019-9921.htmlWed, 17 Jun 2026 02:44:51 +0000MEDIUM 6.5: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to read information that should only be accessible by a different user.https://patchthecve.com/cve/CVE-2019-9920.htmlhttps://patchthecve.com/cve/CVE-2019-9920.htmlWed, 17 Jun 2026 02:44:51 +0000HIGH 8.8: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to perform an action within the context of the account of another user.https://patchthecve.com/cve/CVE-2019-9919.htmlhttps://patchthecve.com/cve/CVE-2019-9919.htmlWed, 17 Jun 2026 02:44:50 +0000MEDIUM 5.4: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. It is possible to craft messages in a way that JavaScript gets executed on the side of the receiving user when the message is opened, aka XSS.https://patchthecve.com/cve/CVE-2019-9918.htmlhttps://patchthecve.com/cve/CVE-2019-9918.htmlWed, 17 Jun 2026 02:44:50 +0000CRITICAL 9.1: An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database.