VULNERABILITY INTELLIGENCE
CVE-2025-54473
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-08-15
Last modified2026-06-17
Description
An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. The issue allows code execution via the unzip feature.
Weakness classification
- security@joomla.org: CWE-434