Vulnérabilités
Joomla CMS et extensions — une fiche par CVE, toutes sources fusionnées.
CVE-2025-54297
A stored XSS vulnerability in CComment component 5.0.0-6.1.14 for Joomla was discovered.
HIGH
CVSS 7.0
CVE-2025-54296
A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered.
HIGH
CVSS 7.0
CVE-2025-54295
A Reflected XSS vulnerability in DJ-Reviews component 1.0-1.3.6 for Joomla was discovered.
MEDIUM
CVSS 5.1
CVE-2025-54294
A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered.
CRITICAL
CVSS 9.3
CVE-2025-50127
A SQLi vulnerability in DJ-Flyer component 1.0-3.2 for Joomla was discovered.
HIGH
CVSS 8.5
CVE-2025-50126
A stored XSS vulnerability in the RSBlog!
MEDIUM
CVSS 5.3
CVE-2025-50058
A stored XSS vulnerability in the RSDirectory!
MEDIUM
CVSS 5.1
CVE-2025-50057
A DOS vulnerability in RSFiles!
MEDIUM
CVSS 6.9
CVE-2025-50056
A reflected XSS vulnerability in RSMail!
MEDIUM
CVSS 5.1
CVE-2025-49486
A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items.
HIGH
CVSS 8.6
CVE-2025-49485
A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' param…
HIGH
CVSS 8.6
CVE-2025-49484
A SQL injection vulnerability in the JS Jobs plugin versions 1.0.0-1.4.1 for Joomla allows low-privilege users to execute arbitrary SQL commands via the 'cvid'…
HIGH
CVSS 8.7
CVE-2025-26855
A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands.
CRITICAL
CVSS 9.8
CVE-2025-26854
A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQL commands.
CRITICAL
CVSS 9.8
CVE-2025-49468
A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered.
HIGH
CVSS 8.6
CVE-2025-49467
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered.
CRITICAL
CVSS 9.3
CVE-2025-32466
A SQL injection vulnerability in RSMediaGallery!
MEDIUM
CVSS 6.7
CVE-2025-32465
A stored XSS vulnerability in RSTickets!
HIGH
CVSS 8.5
CVE-2025-30085
Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered.
CRITICAL
CVSS 9.2
CVE-2025-30084
A stored XSS vulnerability in RSMail!
MEDIUM
CVSS 6.1