Vulnerability Bulletins

CVE-2025-50058

   
Affected software JOOMLA
 
A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the review reply component.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-50058