Boletines de Vulnerabilidades

CVE-2025-49468

   
Software afectado JOOMLA
 
A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the id_module parameter.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-49468