ROBERT KRUCZEK
← Back to home

CVE-2025-30085

CWE-94 Improper Control of Generation of Code ('Code Injection')
CVSS v4.0: 9.2 (CRITICAL) Published: June 11, 2025 View on NVD →

Description

Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature.

Affected Products

Vendor Product Versions Affected
rsjoomla.com RSform!Pro component for Joomla 3.0.0-3.3.14 (affected)

CVSS Score & Vector

Base Score: 9.2 (CRITICAL)
Vector (v4.0):
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/S:N/AU:N/RE:L/U:Clear

Credits / Discoverer

  • Kamil Szczurowski
  • Robert Kruczek

References & Advisories