A vulnerability labeled as critical has been found in Joomboost JoomRecipe 1.0.3. Affected by this vulnerability is an unknown functionality of the component All-recipes Endpoint. The manipulation of the argument Category results in sql injection.
This vulnerability was named CVE-2017-20278. The attack may be performed from remote. In addition, an exploit is available.