PT-2025-30027 · Rsblog!+1 · Rsblog!+1

Kamil Szczurowski + 1 · Published 2025-07-18 · Updated 2025-07-18 · CVE-2025-50126

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions RSBlog! versions 1.11.6 through 1.14.5

Description A stored cross-site scripting (XSS) issue exists in the RSBlog! component for Joomla. The issue allows remote authenticated users to inject arbitrary web script or HTML code via the jform[tags text] parameter.

Recommendations RSBlog! versions 1.11.6 through 1.14.5: Update the component to a newer, secure version. As a temporary workaround, sanitize the jform[tags text] parameter to prevent the injection of malicious scripts.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-50126

Affected Products

Joomla!

Rsblog!

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-50126 · Security Note
• https://twitter.com/CVEnew/status/1946153080275283980 · Twitter Post
• https://t.me/cvetracker/28133 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1946162839057568083 · Twitter Post
• https://rsjoomla.com · Note