CVE-2025-27444

CVE-2025-27444 affects RSform!Pro (Joomla) 3.0.0–3.3.13. Root cause: improper handling of the filter[dateFrom] GET parameter leads to reflected XSS in the administrative backend when an authenticated admin/editor clicks a crafted URL. Impact: potential injection of arbitrary JavaScript in the adm...

RSForm! Component for Joomla! <= 1.0.5 SQLi and LFI Vulnerabilities - Active Check

The RSForm! Component for Joomla! is prone to an SQL injection SQLi vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit...

RSForm! Component for Joomla! 'lang' Parameter Local File Include

The version of the RSForm! component for Joomla! running on the remote host is affected by a local file include vulnerability due to improper sanitization of user-supplied input to the 'lang' parameter before using it in the forme.php script to include PHP code. An unauthenticated, remote attacke...