VULNERABILITY INTELLIGENCE

CVE-2025-54294

EPSS probability0.37%
CISA KEVNot currently listed
Published2025-07-23
Last modified2026-06-17

Description

A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands.

Weakness classification

  • security@joomla.org: CWE-89

Primary references