Joomla! RSMail! Component Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the RSMail! component for Joomla, specifically in versions 1.19.20 to 1.22.26. The vulnerability arises within the dashboard component, where user input is inadequately sanitized before being saved and displayed. This flaw allows attackers to inject malicious JavaScript into text fields or other input areas, which is then executed in the browsers of users who click on the affected text in the dashboard.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the dashboard.