Vulnérabilités
Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.
CVE-2025-54301
A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered.
HIGH
CVSS 8.5
CVE-2025-54300
A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered.
HIGH
CVSS 8.5
CVE-2025-54475
A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands.
HIGH
CVSS 8.7
CVE-2025-54474
A SQLi vulnerability in DJ-Classifieds component 3.9.2-3.10.1 for Joomla was discovered.
HIGH
CVSS 8.5
CVE-2025-54473
An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered.
CRITICAL
CVSS 9.2
CVE-2025-54299
A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered.
CRITICAL
CVSS 9.4
CVE-2025-54298
A stored XSS vulnerability in CommentBox component 1.0.0-1.1.0 for Joomla was discovered.
CRITICAL
CVSS 9.4
CVE-2025-54297
A stored XSS vulnerability in CComment component 5.0.0-6.1.14 for Joomla was discovered.
HIGH
CVSS 7.0
CVE-2025-54296
A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered.
HIGH
CVSS 7.0
CVE-2025-54295
A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered.
MEDIUM
CVSS 5.1
CVE-2025-54294
A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered.
CRITICAL
CVSS 9.3
CVE-2025-50127
A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered.
HIGH
CVSS 8.5
CVE-2025-50126
A stored XSS vulnerability in the RSBlog!
MEDIUM
CVSS 5.3
CVE-2025-50058
A stored XSS vulnerability in the RSDirectory!
MEDIUM
CVSS 5.1
CVE-2025-50057
A DOS vulnerability in RSFiles!
MEDIUM
CVSS 6.9
CVE-2025-50056
A reflected XSS vulnerability in RSMail!
MEDIUM
CVSS 5.1
CVE-2025-49486
A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items.
HIGH
CVSS 8.6
CVE-2025-49485
A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' param…
HIGH
CVSS 8.6
CVE-2025-49484
A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid'…
HIGH
CVSS 8.7
CVE-2025-26855
A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands.
CRITICAL
CVSS 9.8