CVE-2025-50126

Extension - rsjoomla.com - Stored XSS vulnerability RSBlog! component 1.11.6-1.14.5 for Joomla PUBLISHED

Description (CNA)

A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered. The issue allows remote authenticated users to inject arbitrary web script or HTML via the jform[tags_text] parameter.

Affected (CNA)

Vendor / product	Versions
rsjoomla.com / RSBlog! component for Joomla	affected 1.11.6-1.14.5

CWE

CWE-79

References

https://rsjoomla.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.