CVE Daily

CVE-2025-50058

A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was ...

Medium CVSS 5.1

Overview

A stored XSS vulnerability in the RSDirectory! component 1.0.0-2.2.8 Joomla was discovered. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the review reply component.

CWE: CWE-79 Published: 2025-07-18T10:15:34.523
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 5.1 (MEDIUM)
  • Detected tags: joomla, stored_xss, xss (tag impact: MODERATE)

Recommended actions:

  • Sanitize stored input and enforce CSP.
  • Apply context-aware output encoding.
  • Enable Content-Security-Policy and HttpOnly/SameSite cookies.

Recommended tools

Tags