Back to Database
Status published
Medium
CVE-2025-50126
Extension - rsjoomla.com - Stored XSS vulnerability RSBlog! component 1.11.6-1.14.5 for Joomla
Vulnerability Description
A stored XSS vulnerability in the RSBlog! component 1.11.6-1.14.5 Joomla was discovered. The issue allows remote authenticated users to inject arbitrary web script or HTML via the jform[tags_text] parameter.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-50126
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Kamil Szczurowski
- Robert Kruczek
References
More from rsjoomla.com
View All →CVE-2025-50058
Extension - rsjoomla.com - Stored XSS vulnerability in RSDirectory! component 1.16.3-1.17.7 for Joomla
Medium
5.1
CVE-2025-50057
Extension - rsjoomla.com - DOS vulnerability RSFiles! component 1.16.3-1.17.7 for Joomla
Medium
6.9
CVE-2025-50056
Extension - rsjoomla.com - Reflected XSS vulnerability RSMail! component 1.19.20-1.22.28 for Joomla
Medium
5.1
CVE-2025-32466
Extension - rsjoomla.com - SQL injection vulnerability in RSMediaGallery! component 1.7.4 - 2.1.7 for Joomla
Medium
6.7
CVE-2025-32465
Extension - rsjoomla.com - Stored XSS vulnerability in RSTickets! component 1.9.12 - 3.3.0 for Joomla
High
8.5
Affected Vendor
rsjoomla.com
View all reports →Affected Software
RSBlog! component for Joomla
Vulnerable Versions:
1.11.6-1.14.5
Timeline
Official Publish:
July 18th, 2025
Last Modified:
July 23rd, 2025
Added to House:
July 22nd, 2026