Back to search
CVE-2025-27754
Published: Jun 5, 2025
Modified: Jun 8, 2025
PUBLISHED
Description
A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered. The vulnerability allows authenticated users to inject malicious JavaScript into the plugin's resource. The injected payload is stored by the application and later executed when other users view the affected content.
| Vendor | Product | Versions |
|---|---|---|
rsjoomla.com | RSBlog component for Joomla | affected 1.11.6-1.14.4 |
Weaknesses (CWE)
References
https://rsjoomla.com/
product
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now