Security Advisory

CVE-2025-49468

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-06-13 09:48:20

Last updated 2025-06-13 12:20:23

Assigner Joomla

CVSS score 8.6

State PUBLISHED

Description

A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the id_module parameter.

← Browse all CVEs View on cve.org ↗