Medium · 5.1 CVE-2025-50058 EUVD-2025-21869GHSA-g6wg-qc5j-3jpf

Extension - rsjoomla.com - Stored XSS vulnerability in RSDirectory! component 1.16.3-1.17.7 for Joomla

Published Jul 18, 2025 · Updated Jul 20, 2025 · Assigned by Joomla

Vendor: rsjoomla.com Product: RSDirectory! component for Joomla Category: Web / CMS

Description

A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the review reply component.

Affected products

Vendor	Product	Affected	Fixed
rsjoomla.com	RSDirectory! component for Joomla	1.0.0-2.2.8	—

Advisories 1

WID-SEC-2025-1606 Joomla Extensions: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 20, 2025

References

https://rsjoomla.com/ product