High · 8.6 CVE-2025-49468 EUVD-2025-18260GHSA-742p-jhvm-7jqm

Joomla Extension - nobossextensions.com - SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla

Published Jun 13, 2025 · Updated Jun 13, 2025 · Assigned by Joomla

Vendor: nobossextensions.com Product: No Boss Calendar component for Joomla Category: Web / CMS

Description

A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the id_module parameter.

Affected products

Vendor	Product	Affected	Fixed
nobossextensions.com	No Boss Calendar component for Joomla	1.0.0-5.0.6	—

References

https://nobossextensions.com/ product