Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-50126

Extension - rsjoomla.com - Stored XSS vulnerability RSBlog! component 1.11.6-1.14.5 for Joomla

Description

A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered. The issue allows remote authenticated users to inject arbitrary web script or HTML via the jform[tags_text] parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

rsjoomla.com RSBlog! component for Joomla

Default version status: unaffected

  • 1.11.6-1.14.5affected

References