CVE-2025-27444

The RSform!Pro component (versions 3.0.0 - 3.3.13 ) for Joomla contains a reflected XSS vulnerability due to improper handling of the filter[dateFrom] GET parameter. This parameter is reflected unescaped within the administrative backend interface, allowing an authenticated attacker with admin or...

RSForm! Component for Joomla! <= 1.0.5 SQLi and LFI Vulnerabilities - Active Check

The RSForm! Component for Joomla! is prone to an SQL injection SQLi vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to compromise the application, access or modify data, or exploit...

RSForm! Component for Joomla! 'lang' Parameter Local File Include

The version of the RSForm! component for Joomla! running on the remote host is affected by a local file include vulnerability due to improper sanitization of user-supplied input to the 'lang' parameter before using it in the forme.php script to include PHP code. An unauthenticated, remote attacke...