PT-2025-34597 · Joomla+1 · Joomla!+1

Sebastian Jeż · Published 2025-08-25 · Updated 2025-08-25 · CVE-2025-54300

Positive Technologies (AI Summary)

CVSS v4.0

8.5

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions: Quantum Manager versions 1.0.0 through 3.2.0

Description: A stored cross-site scripting (XSS) issue was identified in the Quantum Manager component for Joomla. The SVG upload feature does not properly sanitize uploaded files, allowing for the injection of persistent scripts.

Recommendations: Quantum Manager version 3.2.0 and earlier: Ensure all SVG uploads are properly sanitized to prevent the injection of malicious code.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-54300

Affected Products

Joomla!

Quantum Manager

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-54300 · Security Note
• https://twitter.com/BaseFortify/status/1959906060409700822 · Twitter Post
• https://twitter.com/CveFindCom/status/1959875898003325203 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1959887277473103923 · Twitter Post
• https://norrnext.com · Note
• https://twitter.com/CVEnew/status/1959877563674656978 · Twitter Post
• https://t.me/CVEtracker/30821 · Telegram Post
• https://t.me/cveNotify/133329 · Telegram Post