VULNERABILITY INTELLIGENCE

CVE-2025-50058

CVSS score5.1 MEDIUM

EPSS probability0.42%

CISA KEVNot currently listed

Published2025-07-18

Last modified2026-06-17

Description

A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the review reply component.