CVE-2025-50058: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in rsjoomla.com RSDirectory! component for Joomla
Severity: mediumType: vulnerabilityCVE-2025-50058
A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the review reply component.
CVE-2025-50058: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in rsjoomla.com RSDirectory! component for Joomla
Medium
Published: Fri Jul 18 2025 (07/18/2025, 09:51:29 UTC)
Source: CVE Database V5
Vendor/Project: rsjoomla.com
Product: RSDirectory! component for Joomla
Description
A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the review reply component.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- Joomla
- Date Reserved
- 2025-06-11T19:08:08.079Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 687a1b67a83201eaacf1f470
Added to database: 7/18/2025, 10:01:11 AM
Last updated: 7/18/2025, 10:01:11 AM
Views: 1
Related Threats
CVE-2025-50126: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in rsjoomla.com RSBlog! component for Joomla
MediumVulnerabilityFri Jul 18 2025
CVE-2025-50057: CWE-400 Uncontrolled Resource Consumption in rsjoomla.com RSFiles! component for Joomla
MediumVulnerabilityFri Jul 18 2025
CVE-2025-50056: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in rsjoomla.com RSMail! component for Joomla
MediumVulnerabilityFri Jul 18 2025
CVE-2025-49486: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in balbooa.com Balbooa Gallery component for Joomla
HighVulnerabilityFri Jul 18 2025
CVE-2025-49485: CWE-89: Improper Neutralization of Special Elements used in an SQL Command in balbooa.com Balbooa Forms component for Joomla
HighVulnerabilityFri Jul 18 2025
Actions
Please log in to the Console to use AI analysis features.
External Links
Need enhanced features?
Contact root@offseq.com for Pro access with improved analysis and higher rate limits.