Rsform!Pro Component For Joomla

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:rsjoomla.com:rsform!pro_component_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRsjoomla.Com (53bc36d9-ce21-5632-a41f-634a6cb987aa)
ProductRsform!Pro Component For Joomla (f1a7438d-d052-5731-8731-e9a19eb36ff8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-30085 vulnerable 2026-06-08 07:16:59.050139 Extension - rsjoomla.com - Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla
Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature.
Published: 2025-06-11T19:07:39.032Z
Updated: 2025-06-12T15:18:38.814Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27444 vulnerable 2026-06-08 07:14:54.977673 Extension - rsjoomla.com - A reflected XSS vulnerability RSform!Pro component 3.0.0 - 3.3.13 for Joomla
A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered. The issue arises from the improper handling of the filter[dateFrom] GET parameter, which is reflected unescaped in the administrative backend interface. This allows an authenticated attacker with admin or editor privileges to inject arbitrary JavaScript code by crafting a malicious URL.
Published: 2025-06-04T07:24:18.757Z
Updated: 2025-06-05T13:20:53.740Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.