CVE 9.3 CRITICAL

Extension – stackideas.com – SQLi vulnerability in Komento component 4.0.0-4.0.7 for Joomla_CVE-2025-54294

9.3 / 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Description

A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands.

Basic Information

ID CVE-2025-54294
Source Joomla
Published Jul 23, 2025 at 11:15
Modified Jul 24, 2025 at 04:41

Affected Product

Vendor stackideas.com
Product Komento component for Joomla
Version 4.0.0-4.0.7
Affected Versions stackideas.com Komento component for Joomla 4.0.0-4.0.7

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.