RSBlog! Component Stored Cross-Site Scripting Vulnerability for Joomla
Vulnerability
A stored cross-site scripting vulnerability has been identified in the RSBlog! component, specifically versions 1.11.6 to 1.14.4, for Joomla. This vulnerability allows authenticated users to inject malicious JavaScript into the plugin's resources. The injected script is stored by the application and executed when other users view the affected content.
Impact
Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the content.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.7exploitability
5.0remediation
0.0relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.