VULNERABILITY INTELLIGENCE
CVE-2025-49485
EPSS probability0.31%
CISA KEVNot currently listed
Published2025-07-18
Last modified2026-06-17
Description
A SQL injection vulnerability in the Balbooa Forms plugin 1.0.0-2.3.1.1 for Joomla allows privileged users to execute arbitrary SQL commands via the 'id' parameter.
Weakness classification
- security@joomla.org: CWE-89