CVE-2025-54299

CVE-2025-54299 is a stored Cross-Site Scripting (XSS) vulnerability in the No Boss Testimonials component for Joomla. Affects No Boss Testimonials versions 1.0.0–3.0.0 and 4.0.0–4.0.2. Root cause is stored XSS that allows injection of malicious scripts into the application, potentially compromisi...

CVE-2025-54299 Extension - nobossextensions.com - Stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla

A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered...

CVE-2025-54299 Extension - nobossextensions.com - Stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla

A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered...

CVE-2025-54298 Extension - firecoders.com - Stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...

CVE-2025-54298

CVE-2025-54298 affects the Firecoders/CommentBox Joomla component, specifically versions 1.0.0–1.1.0, with a stored XSS vulnerability in the CommentBox component. The issue is described as a stored XSS that can impact confidentiality, integrity, and availability, with high/critical risk indicator...

CVE-2025-54298 Extension - firecoders.com - Stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla

A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered...

No Boss Extensions No Boss Testimonials component for Joomla 跨站脚本漏洞

No Boss Extensions No Boss Testimonials component for Joomla is a Joomla plugin from Brazilian company No Boss Extensions. A cross-site scripting vulnerability exists in the No Boss Extensions No Boss Testimonials component for Joomla versions 1.0.0 through 3.0.0 and 4.0.0 through 4.0.2, which...

Firecoders Joomla component CommentBox 跨站脚本漏洞

Firecoders Joomla component CommentBox is a Joomla commenting component from Firecoders Greece. A cross-site scripting vulnerability exists in Firecoders Joomla component CommentBox versions 1.0.0 through 1.1.0, which stems from vulnerability to stored cross-site scripting attacks...

xsser

XSSER ========== Presentation From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Version 2.75 - 2017: Non...

Exploit for Improper Input Validation in Joomla Joomla\!

CMS-Hunter 简介 Content Management System Vulnerability Hunter 说明：目前来看，本项目会进行长期维护，有修改的建议或者想法欢迎联系作者。 CMS 漏洞列表 Discuz - Discuz＜3.4birthprovince前台任意文件删除 DedeCMS - DedeCMSv5.7shopsdelivery存储型XSS - DedeCMSv5.7carbuyaction存储型XSS - DedeCMSv5.7友情链接CSRFGetShell - DedeCMS V5.7 SP2后台存在代码执行漏洞 Drupal -...

CVE-2025-50127

A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands...

CVE-2025-54297

A stored XSS vulnerability in CComment component 5.0.0-6.1.14 for Joomla was discovered...

CVE-2025-54295

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered...

CVE-2025-54294

A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands...

CVE-2025-54296

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54297

A stored XSS vulnerability in CComment component 5.0.0-6.1.14 for Joomla was discovered...

CVE-2025-50127

A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands...

CVE-2025-54296

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54294

A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands...

CVE-2025-54295

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered...