Vulnerability Bulletins

CVE-2025-49485

   
Affected software JOOMLA
 
A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' parameter.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-49485