VULNERABILITY INTELLIGENCE

CVE-2025-50056

EPSS probability0.44%
CISA KEVNot currently listed
Published2025-07-18
Last modified2026-06-17

Description

A reflected XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 28 Joomla was discovered. The issue allows remote attackers to inject arbitrary web script or HTML via the crafted parameter.

Weakness classification

  • security@joomla.org: CWE-79

Primary references