9.3
/ 10
CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Description
A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands.
Basic Information
ID
CVE-2025-54294
Source
Joomla
Published
Jul 23, 2025 at 11:15
Modified
Jul 24, 2025 at 04:41
Affected Product
Vendor
stackideas.com
Product
Komento component for Joomla
Version
4.0.0-4.0.7
Affected Versions
stackideas.com Komento component for Joomla 4.0.0-4.0.7