rsjoomla.com

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

rsjoomla.com records in CISA KEV

No rsjoomla.com vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Com Rscomments 1 record LOW Rsfiles! 1 record HIGH Rsfirewall! 1 record HIGH Rsform!blog 1 record LOW Rsform!pro 1 record LOW Rsmail! 1 record LOW

Records

17 records

TI-2021-03087 CVE-2021-4226 · GHSA-j8wj-77mv-262g

RSFirewall < 1.1.25 - IP Block Bypass

HIGH 82

RSFirewall tries to identify the original IP address by looking at different HTTP headers.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00546 Published 2022-12-15 Fixed in 1.1.25 CWE-345

TI-2026-41645 CVE-2026-57827 · GHSA-7q98-wg4p-5v7g

Unrestricted file upload in rsjoomla.com RSFiles extension for Joomla

HIGH 66

Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.16871 Published 2026-07-11 No fix listed CWE-434

TI-2025-21437 CVE-2025-30085 · GHSA-2j3x-fvgp-v399

Extension - rsjoomla.com - Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla

MEDIUM 49

Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered.

CVSS 4.0CRITICAL 9.2 Network High privileges No interaction EPSS 0.00604 Published 2025-06-11 No fix listed CWE-94

TI-2025-23532 CVE-2025-32465 · GHSA-5p4m-vh8m-vc4h

Extension - rsjoomla.com - Stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla

LOW 39

A stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla was discovered.

CVSS 4.0HIGH 8.5 Network Low privileges User interaction EPSS 0.00354 Published 2025-06-11 No fix listed CWE-79

TI-2025-31970 CVE-2025-50057 · GHSA-qcwv-qghh-rpc5

Extension - rsjoomla.com - DOS vulnerability RSFiles! component 1.16.3-1.17.7 for Joomla

LOW 37

A DOS vulnerability in RSFiles! component 1.16.3-1.17.7 Joomla was discovered.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00453 Published 2025-07-18 No fix listed CWE-400

TI-2025-20546 CVE-2025-27753 · GHSA-g9c9-hr7f-cr62

Extension - rsjoomla.com - A SQLi vulnerability RSMediaGallery component 1.7.4 - 2.1.6 for Joomla

LOW 36

A SQLi vulnerability in RSMediaGallery component 1.7.4 - 2.1.6 for Joomla was discovered.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00247 Published 2025-06-05 No fix listed CWE-89

TI-2026-20459 CVE-2026-25341 · GHSA-93j2-qhr6-j792

WordPress RSFirewall! plugin <= 1.1.45 - Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RSJoomla! RSFirewall! rsfirewall allows Stored XSS.This issue affects RSFirewall!: from n/a through <= 1.1.45.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2026-03-25 No fix listed CWE-79

TI-2025-23533 CVE-2025-32466 · GHSA-rp7w-qpv5-65rh

Extension - rsjoomla.com - SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla

LOW 30

A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered.

CVSS 4.0MEDIUM 6.7 Network High privileges User interaction EPSS 0.0032 Published 2025-06-11 No fix listed CWE-89

TI-2025-20547 CVE-2025-27754 · GHSA-hp3h-rxwj-jc56

Extension - rsjoomla.com - A stored XSS vulnerability RSBlog! component 1.11.6 - 1.14.4 for Joomla

LOW 28

A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00227 Published 2025-06-05 No fix listed CWE-79

TI-2025-21436 CVE-2025-30084 · GHSA-q387-9xqr-fhhg

Extension - rsjoomla.com - Reflected XSS vulnerability RSMail! component 1.19.20-1.22.26 for Joomla

LOW 27

A stored XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 for Joomla was discovered.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00224 Published 2025-06-05 No fix listed CWE-79

TI-2025-20280 CVE-2025-27445 · GHSA-6vfv-v5v8-qx7q

Extension - rsjoomla.com - A path traversal vulnerability RSFirewall component 2.9.7 - 3.1.5 for Joomla

LOW 25

A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00462 Published 2025-06-05 No fix listed CWE-35

TI-2025-32029 CVE-2025-50126 · GHSA-95g3-5j3x-8jq6

Extension - rsjoomla.com - Stored XSS vulnerability RSBlog! component 1.11.6-1.14.5 for Joomla

LOW 24

A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00404 Published 2025-07-18 No fix listed CWE-79

TI-2025-31971 CVE-2025-50058 · GHSA-g6wg-qc5j-3jpf

Extension - rsjoomla.com - Stored XSS vulnerability in RSDirectory! component 1.16.3-1.17.7 for Joomla

LOW 24

A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00423 Published 2025-07-18 No fix listed CWE-79

TI-2025-31969 CVE-2025-50056 · GHSA-jw69-49f2-2vh8

Extension - rsjoomla.com - Reflected XSS vulnerability RSMail! component 1.19.20-1.22.28 for Joomla

LOW 24

A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00442 Published 2025-07-18 No fix listed CWE-79

TI-2025-06855 CVE-2025-7518 · GHSA-f6pp-29jv-qvgx

RSFirewall! <= 1.1.42 - Authenticated (Admin+) Arbitrary File Read

LOW 23

The RSFirewall! plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.1.42 via the get_local_filename() function.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0045 Published 2025-07-12 No fix listed CWE-22

TI-2010-02367 CVE-2010-2464 · GHSA-mjpc-3jv3-gwf3

Multiple cross-site scripting (XSS) vulnerabilities in the RSComments (com_rscomments)…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in the RSComments (com_rscomments) component 1.0.0 Rev 2 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) website and (2) name para…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0172 Published 2010-06-25 No fix listed CWE-79

TI-2025-20279 CVE-2025-27444 · GHSA-7rpw-j66x-gcxm

Extension - rsjoomla.com - A reflected XSS vulnerability RSform!Pro component 3.0.0 - 3.3.13 for Joomla

LOW 22

A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00312 Published 2025-06-04 No fix listed CWE-79

Open these records in search →