PT-2025-34597 · Joomla+1 · Joomla!+1

Sebastian Jeż · Publicado 2025-08-25 · Atualizado 2025-08-25 · CVE-2025-54300

Positive Technologies (AI Summary)

CVSS v4.0

8.5

Alta

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions: Quantum Manager versions 1.0.0 through 3.2.0

Description: A stored cross-site scripting (XSS) issue was identified in the Quantum Manager component for Joomla. The SVG upload feature does not properly sanitize uploaded files, allowing for the injection of persistent scripts.

Recommendations: Quantum Manager version 3.2.0 and earlier: Ensure all SVG uploads are properly sanitized to prevent the injection of malicious code.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-54300

Produtos afetados

Joomla!

Quantum Manager

Referências · 8

• https://twitter.com/BaseFortify/status/1959906060409700822 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/1959875898003325203 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-54300 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1959887277473103923 · Publicação no Twitter
• https://norrnext.com · Nota
• https://twitter.com/CVEnew/status/1959877563674656978 · Publicação no Twitter
• https://t.me/CVEtracker/30821 · Publicação no Telegram
• https://t.me/cveNotify/133329 · Publicação no Telegram