19394 matches found
RSJoomla! RSFiles! component for Joomla 资源管理错误漏洞
RSJoomla! RSFiles! component for Joomla is an extension component for the Joomla content management system from RSJoomla! A resource management error vulnerability exists in RSJoomla! RSFiles! component for Joomla versions 1.16.3 through 1.17.7, which stems from mishandling of the search function...
PT-2025-30011 · Joomla · Articles Calendar
Name of the Vulnerable Software and Affected Versions: Articles Calendar versions 1.0.0 through 1.0.1.0007 Description: A SQL injection issue exists in the Articles Calendar extension for Joomla. This allows attackers to execute arbitrary SQL commands. Recommendations: Update Articles Calendar to...
PT-2025-30021 · Joomla · Js Jobs Plugin
Name of the Vulnerable Software and Affected Versions: JS Jobs plugin for Joomla versions 1.0.0 through 1.4.1 Description: A SQL injection vulnerability in the JS Jobs plugin for Joomla allows low-privilege users to execute arbitrary SQL commands via the cvid parameter in the employee application...
PT-2025-30022 · Joomla · Balbooa Forms
Name of the Vulnerable Software and Affected Versions: Balbooa Forms versions 1.0.0 through 2.3.1.1 Description: A SQL injection issue exists in the Balbooa Forms plugin for Joomla. Privileged users can execute arbitrary SQL commands through the id parameter. Recommendations: Balbooa Forms versio...
Joomcar Extensions Articles Good Search SQL注入漏洞
Joomcar Extensions Articles Good Search is a Joomla plugin from Joomcar Extensions, Inc. A SQL injection vulnerability exists in Joomcar Extensions Articles Good Search versions 1.0.0 through 1.2.4.0011, which stems from vulnerability to SQL injection attacks...
PT-2025-30027 · Joomla +1 · Joomla! +1
Name of the Vulnerable Software and Affected Versions: RSBlog! versions 1.11.6 through 1.14.5 Description: A stored cross-site scripting XSS issue exists in the RSBlog! component for Joomla. The issue allows remote authenticated users to inject arbitrary web script or HTML code via the jformtags...
PT-2025-30023 · WordPress · Balbooa Gallery
Name of the Vulnerable Software and Affected Versions: Balbooa Gallery plugin versions 1.0.0 through 2.4.0 Description: A stored cross-site scripting XSS issue exists in the Balbooa Gallery plugin for Joomla. Privileged users can store malicious scripts within gallery items. Recommendations: Upda...
Joomsky JS Jobs SQL注入漏洞
Joomsky JS Jobs is a Joomla Content Management System CMS based recruitment management plugin from Joomsky. A SQL injection vulnerability exists in Joomsky JS Jobs versions 1.0.0 through 1.4.1, which stems from an incorrect manipulation of the parameter cvid resulting in a SQL injection attack...
PT-2025-30010 · Joomla · Joomla! +1
Name of the Vulnerable Software and Affected Versions: Articles Good Search extension for Joomla versions 1.0.0 through 1.2.4.0011 Description: A SQL injection issue exists in the Articles Good Search extension for Joomla. This allows attackers to execute arbitrary SQL commands. Recommendations:...
RSJoomla! RSDirectory! component for Joomla 跨站脚本漏洞
RSJoomla! RSDirectory! component for Joomla is an extension component for the Joomla content management system from RSJoomla! A cross-site scripting vulnerability exists in RSJoomla! RSDirectory! component for Joomla versions 1.0.0 through 2.2.8, which stems from mishandling of the comment reply...
RSJoomla! RSBlog! component for Joomla 跨站脚本漏洞
RSJoomla! RSBlog! component for Joomla is an extension component for the Joomla content management system from RSJoomla! A cross-site scripting vulnerability exists in RSJoomla! RSBlog! component for Joomla versions 1.11.6 through 1.14.5, which stems from improper handling of the jform tagstext...
RSJoomla! RSMail! component for Joomla 跨站脚本漏洞
RSJoomla! RSMail! component for Joomla is an extension component for the Joomla content management system from RSJoomla! A cross-site scripting vulnerability exists in RSMail component versions 1.19.20 through 1.22.26, which stems from improper handling of specially crafted parameters and could...
PT-2025-30025 · Rsjoomla · Rsfiles!
Name of the Vulnerable Software and Affected Versions: RSFiles! component versions 1.16.3 through 1.17.7 Description: A denial-of-service issue exists in the RSFiles! component of Joomla. The problem allows unauthenticated remote attackers to disrupt service access through the search feature...
Balbooa Forms SQL注入漏洞
Balbooa Forms is a Joomla extension from Balbooa Inc. A SQL injection vulnerability exists in Balbooa Forms versions 1.0.0-2.3.1.1, which stems from an incorrect manipulation of the parameter id leading to a SQL injection attack...
Balbooa Gallery 跨站脚本漏洞
Balbooa Gallery is a Joomla extension from Balbooa Inc. A cross-site scripting vulnerability exists in Balbooa Gallery versions 1.0.0-2.4.0, which stems from a stored cross-site scripting attack...
PT-2025-30024 · Rsjoomla · Rsmail!
Name of the Vulnerable Software and Affected Versions: RSMail! versions 1.19.20 through 1.22.26 Description: A reflected cross-site scripting XSS issue exists in the RSMail! component for Joomla. The issue allows remote attackers to inject arbitrary web script or HTML via a manipulated parameter...
CVE-2025-49468
A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the idmodule parameter...
CVE-2025-49467
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2025-30085
Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature...