CVE-2025-49468

Joomla Extension - nobossextensions.com - SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla PUBLISHED

Description (CNA)

A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the id_module parameter.

Affected (CNA)

Vendor / product	Versions
nobossextensions.com / No Boss Calendar component for Joomla	affected 1.0.0-5.0.6

CWE

CWE-89

References

https://nobossextensions.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.