Improperly built filter clauses lead to a SQL injection vulnerability in the search query for com_finder.CreditsAdrian Junge aka vurloReferenceshttps://developer.joomla.org/security-centre/1038-20260506-core-authenticated-blind-sqli-in-com-finder.html