CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It affects Java. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-27444
Severity
MEDIUM
CVSS
4.8
EPSS
0.26%
Java
Original NVD Description
A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered. The issue arises from the improper handling of the filter[dateFrom] GET parameter, which is reflected unescaped in the administrative backend interface. This allows an authenticated attacker with admin or editor privileges to inject arbitrary JavaScript code by crafting a malicious URL.
Related CVEs
Other vulnerabilities affecting the same vendor(s)