CVE-2025-54295 Extension - dj-extensions.com - Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla

A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered...

CVE-2025-54296 Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-54296

A stored Cross‑Site Scripting (XSS) vulnerability exists in the ProFiles component for Joomla, affecting versions 1.0 through 1.5.0. The issue is described in multiple sources (notably PT-2025-30569 and CVE records) as allowing injection/storage of scripts within the application. The connected do...

CVE-2025-54296 Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered...

CVE-2025-50127 Extension - dj-extensions.com - SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla

A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands...

CVE-2025-50127

CVE-2025-50127 concerns the DJ-Flyer Joomla extension (component DJ-Flyer 1.0–3.2). The issue is a SQL injection vulnerability that allows privileged users to execute arbitrary SQL commands. Root cause is improper input handling in the vulnerable component, enabling crafted queries to reach the d...

CVE-2025-50127 Extension - dj-extensions.com - SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla

A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered. The issue allows privileged users to execute arbitrary SQL commands...

PT-2025-30569 · Profiles · Profiles

Name of the Vulnerable Software and Affected Versions: ProFiles component for Joomla versions 1.0 through 1.5.0 Description: A stored Cross-Site Scripting XSS vulnerability exists in the ProFiles component for Joomla. This issue allows malicious actors to inject and store scripts into the...

PT-2025-30570 · Unknown · Joomla Ccomment

Name of the Vulnerable Software and Affected Versions: Joomla CComment component versions 5.0.0 through 6.1.14 Description: A stored cross-site scripting XSS issue exists in the CComment component. This allows an attacker to inject malicious scripts into the application, potentially compromising...

PT-2025-30568 · Joomla · Dj-Reviews

Name of the Vulnerable Software and Affected Versions: DJ-Reviews versions 1.0 through 1.3.6 Description: A Reflected Cross-Site Scripting XSS issue exists in the DJ-Reviews component for Joomla. This allows an attacker to inject malicious scripts into a web page viewed by other users...

PT-2025-30567 · Komento +1 · Komento +1

Name of the Vulnerable Software and Affected Versions: Komento versions 4.0.0 through 4.0.7 Description: A SQL injection flaw exists in the Komento component for Joomla. This issue permits unprivileged users to execute arbitrary SQL commands. Recommendations: Update Komento to a version newer tha...

📄 Joomla JS Jobs 1.4.2 SQL Injection

Joomla JS Jobs plugin version 1.4.2 suffers from a remote SQL injection vulnerability. Exploit Title: Joomla JS Jobs plugin 1.4.2 - SQL injection Google Dork: n/a Date: 07/07/2025 Exploit Author: Adam Wallwork Vendor Homepage: https://joomsky.com/ Demo: https://demo.joomsky.com/js-jobs/jm/free/...

Joomla JS Jobs plugin 1.4.2 - SQL injection

Exploit Title: Joomla JS Jobs plugin 1.4.2 - SQL injection Google Dork: n/a Date: 07/07/2025 Exploit Author: Adam Wallwork Vendor Homepage: https://joomsky.com/ Demo: https://demo.joomsky.com/js-jobs/jm/free/ Software Link: https://extensions.joomla.org/extension/js-jobs/ Version: v1.4.2 Tested o...

CVE-2025-50056

A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered. The issue allows remote attackers to inject arbitrary web script or HTML via the crafted parameter...

CVE-2025-49485

A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' parameter...

CVE-2025-50126

A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered. The issue allows remote authenticated users to inject arbitrary web script or HTML via the jformtagstext parameter...

CVE-2025-49486

A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items...

CVE-2025-50057

A DOS vulnerability in RSFiles! component 1.16.3-1.17.7 Joomla was discovered. The issue allows unauthenticated remote attackers to deny access to service via the search feature...

CVE-2025-50058

A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the review reply component...

CVE-2025-49484

A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid' parameter in the employee application feature...