VULNERABILITY INTELLIGENCE
CVE-2025-49468
EPSS probability0.49%
CISA KEVNot currently listed
Published2025-06-13
Last modified2026-06-17
Description
A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the id_module parameter.
Weakness classification
- security@joomla.org: CWE-89