CVE-2025-27754: Extension - rsjoomla.com - A stored XSS vulnerability RSBlog! component 1.11.6 - 1.14.4 for Joomla
A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered. The vulnerability allows authenticated users to inject malicious JavaScript into the plugin's resource. The injected payload is stored by the application and later executed when other users view the affected content.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27754?
The severity of CVE-2025-27754 is rated as critical due to its stored cross-site scripting (XSS) nature affecting multiple versions of RSBlog!.
How do I fix CVE-2025-27754?
To fix CVE-2025-27754, update RSBlog! to the latest version that patches the stored XSS vulnerability.
Who is affected by CVE-2025-27754?
Authenticated users of RSBlog! versions 1.11.6 to 1.14.4 are affected by CVE-2025-27754.
What kind of attacks can be executed using CVE-2025-27754?
CVE-2025-27754 allows attackers to inject and execute malicious JavaScript in the context of other users' browsers.
Is CVE-2025-27754 a local or remote vulnerability?
CVE-2025-27754 is a remote vulnerability that requires authenticated access to exploit.