CVE-2025-27444

A reflected XSS vulnerability in RSform!Pro component 3.0.0 - 3.3.13 for Joomla was discovered. The issue arises from the improper handling of the filter[dateFrom] GET parameter, which is reflected unescaped in the administrative backend interface. This allows an authenticated attacker with admin or editor privileges to inject arbitrary JavaScript code by crafting a malicious URL.

• CWE-79

• https://rsjoomla.com/Product

Published

Jun 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-27439Buffer underflow in some Zoom Workplace Apps may allow an au…8.8
• CVE-2025-2744A vulnerability, which was classified as critical, was found…5.4
• CVE-2025-27440Heap overflow in some Zoom Workplace Apps may allow an authe…8.8
• CVE-2025-27441Cross site scripting in some Zoom Workplace Apps may allow a…5.2
• CVE-2025-27442Cross site scripting in some Zoom Workplace Apps may allow a…5.2
• CVE-2025-27443Insecure default variable initialization in some Zoom Workpl…5.5
• CVE-2025-27445A path traversal vulnerability in RSFirewall component 2.9.7…5.4
• CVE-2025-27446Incorrect Permission Assignment for Critical Resource vulner…7.8
• CVE-2025-27447The web application is susceptible to cross-site-scripting a…6.1
• CVE-2025-27448The web application is susceptible to cross-site-scripting a…5.4
• CVE-2025-27449The MEAC300-FNADE4 does not implement sufficient measures to…9.8
• CVE-2025-2745A cross-site scripting vulnerability exists in AVEVA PI Web …6.5