Medium · 5.1 CVE-2025-50056 EUVD-2025-21871GHSA-jw69-49f2-2vh8

Extension - rsjoomla.com - Reflected XSS vulnerability RSMail! component 1.19.20-1.22.28 for Joomla

Published Jul 18, 2025 · Updated Jul 20, 2025 · Assigned by Joomla

Vendor: rsjoomla.com Product: RSMail! component for Joomla Category: Web / CMS

Description

A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered. The issue allows remote attackers to inject arbitrary web script or HTML via the crafted parameter.

Affected products

Vendor	Product	Affected	Fixed
rsjoomla.com	RSMail! component for Joomla	1.19.20-1.22.28	—

Advisories 1

WID-SEC-2025-1606 Joomla Extensions: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 20, 2025

References

https://rsjoomla.com/ product