Priority HIGH 66
Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17.12 - The Joomla extension RSFiles is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files…
CVSS 4.0CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.16871 · Published 2026-07-11 · No fix listed CWE-434
Priority LOW 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RSJoomla! RSFirewall! rsfirewall allows Stored XSS.This issue affects RSFirewall!: from n/a through <= 1.1.45.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00182 · Published 2026-03-25 · No fix listed CWE-79
Priority LOW 24
A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00404 · Published 2025-07-18 · No fix listed CWE-79
Priority LOW 24
A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered.
CVSS 4.0MEDIUM 5.1· Network · High privileges · No interaction · EPSS 0.00423 · Published 2025-07-18 · No fix listed CWE-79
Priority LOW 37
A DOS vulnerability in RSFiles! component 1.16.3-1.17.7 Joomla was discovered.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00453 · Published 2025-07-18 · No fix listed CWE-400
Priority LOW 24
A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered.
CVSS 4.0MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.00442 · Published 2025-07-18 · No fix listed CWE-79
Priority LOW 23
The RSFirewall! plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.1.42 via the get_local_filename() function.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0045 · Published 2025-07-12 · No fix listed CWE-22
Priority MEDIUM 49
Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered.
CVSS 4.0CRITICAL 9.2· Network · High privileges · No interaction · EPSS 0.00604 · Published 2025-06-11 · No fix listed CWE-94
Priority LOW 30
A SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla was discovered.
CVSS 4.0MEDIUM 6.7· Network · High privileges · User interaction · EPSS 0.0032 · Published 2025-06-11 · No fix listed CWE-89
Priority LOW 39
A stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla was discovered.
CVSS 4.0HIGH 8.5· Network · Low privileges · User interaction · EPSS 0.00354 · Published 2025-06-11 · No fix listed CWE-79
Priority LOW 28
A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00227 · Published 2025-06-05 · No fix listed CWE-79
Priority LOW 36
A SQLi vulnerability in RSMediaGallery component 1.7.4 - 2.1.6 for Joomla was discovered.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00247 · Published 2025-06-05 · No fix listed CWE-89
Priority LOW 25
A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00462 · Published 2025-06-05 · No fix listed CWE-35
Priority LOW 27
A stored XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 for Joomla was discovered.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00224 · Published 2025-06-05 · No fix listed CWE-79
Priority LOW 22
A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00312 · Published 2025-06-04 · No fix listed CWE-79
Priority HIGH 82
RSFirewall tries to identify the original IP address by looking at different HTTP headers.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00546 · Published 2022-12-15 · Fixed in 1.1.25 CWE-345
Priority LOW 23
Multiple cross-site scripting (XSS) vulnerabilities in the RSComments (com_rscomments) component 1.0.0 Rev 2 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) website and (2) name para…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0172 · Published 2010-06-25 · No fix listed CWE-79
THREATIST.IORead the docs