Skip to content
OpenAdvisories

Vendor

rsjoomla.com

13 known vulnerabilities.

Products

RSMail! component for Joomla 2 RSMediaGallery component for Joomla 2 RSBlog component for Joomla 2 RSform!Pro component for Joomla 2 RSTickets! component for Joomla 1 RSFiles! component for Joomla 1 rsjoomla.com RSFiles extension for Joomla 1 RSDirectory! component for Joomla 1 RSFirewall component for Joomla 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-50126

    Extension - rsjoomla.com - Stored XSS vulnerability RSBlog! component 1.11.6-1.14.5 for Joomla

    A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered. The issue allows remote authenticated users to inject arbitrary web script or HTML via the jform[tags_text] parameter.

    rsjoomla.com RSBlog component for Joomla Web / CMS
  • Medium 5.1
    CVE-2025-50058

    Extension - rsjoomla.com - Stored XSS vulnerability in RSDirectory! component 1.16.3-1.17.7 for Joomla

    A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the review reply component.

    rsjoomla.com RSDirectory! component for Joomla Web / CMS
  • Medium 6.9
    CVE-2025-50057

    Extension - rsjoomla.com - DOS vulnerability RSFiles! component 1.16.3-1.17.7 for Joomla

    A DOS vulnerability in RSFiles! component 1.16.3-1.17.7 Joomla was discovered. The issue allows unauthenticated remote attackers to deny access to service via the search feature.

    rsjoomla.com RSFiles! component for Joomla Web / CMS
  • Medium 5.1
    CVE-2025-50056

    Extension - rsjoomla.com - Reflected XSS vulnerability RSMail! component 1.19.20-1.22.28 for Joomla

    A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered. The issue allows remote attackers to inject arbitrary web script or HTML via the crafted parameter.

    rsjoomla.com RSMail! component for Joomla Web / CMS
  • Medium 6.7
    CVE-2025-32466

    Extension - rsjoomla.com - SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla

    A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered. The issue occurs within the dashboard component, where user-supplied input is not properly sanitized before being stored and rendered. An attacker can inject m…

    rsjoomla.com RSMediaGallery component for Joomla Web / CMS
  • Medium 6.5
    CVE-2025-27754

    Extension - rsjoomla.com - A stored XSS vulnerability RSBlog! component 1.11.6 - 1.14.4 for Joomla

    A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered. The vulnerability allows authenticated users to inject malicious JavaScript into the plugin's resource. The injected payload is stored by the application and later exec…

    rsjoomla.com RSBlog component for Joomla Web / CMS
  • Medium 6.5
    CVE-2025-27753

    Extension - rsjoomla.com - A SQLi vulnerability RSMediaGallery component 1.7.4 - 2.1.6 for Joomla

    A SQLi vulnerability in RSMediaGallery component 1.7.4 - 2.1.6 for Joomla was discovered. The vulnerability is due to the use of unescaped user-supplied parameters in SQL queries within the dashboard component. This allows an authenticated attacker to inject …

    rsjoomla.com RSMediaGallery component for Joomla Web / CMS
  • Medium 5.4
    CVE-2025-27445

    Extension - rsjoomla.com - A path traversal vulnerability RSFirewall component 2.9.7 - 3.1.5 for Joomla

    A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary files outside the Joomla root directory. The flaw is caused by insufficient sanitization of user-su…

    rsjoomla.com RSFirewall component for Joomla Web / CMS
  • Medium 6.1
    CVE-2025-30084

    Extension - rsjoomla.com - Reflected XSS vulnerability RSMail! component 1.19.20-1.22.26 for Joomla

    A stored XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 for Joomla was discovered. The issue occurs within the dashboard component, where user-supplied input is not properly sanitized before being stored and rendered. An attacker can inject maliciou…

    rsjoomla.com RSMail! component for Joomla Web / CMS
  • Medium 4.8
    CVE-2025-27444

    Extension - rsjoomla.com - A reflected XSS vulnerability RSform!Pro component 3.0.0 - 3.3.13 for Joomla

    A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered. The issue arises from the improper handling of the filter[dateFrom] GET parameter, which is reflected unescaped in the administrative backend interface. This allow…

    rsjoomla.com RSform!Pro component for Joomla Web / CMS