Skip to content
OpenAdvisories
High · 8.5 CVE-2025-54300 EUVD-2025-25658GHSA-499q-9p4f-56jf

Extension - norrnext.com - Stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla

Published Aug 25, 2025 · Updated Aug 25, 2025 · Assigned by Joomla

Vendor: norrnext.com Product: Quantum Mamanger component for Joomla Category: Web / CMS

Description

A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered. The SVG upload feature does not sanitize uploads.

Affected products

VendorProductAffectedFixed
norrnext.com Quantum Mamanger component for Joomla 1.0.0-3.2.0 —

References