CVE-2025-27753

A SQLi vulnerability in RSMediaGallery component 1.7.4 - 2.1.6 for Joomla was discovered. The vulnerability is due to the use of unescaped user-supplied parameters in SQL queries within the dashboard component. This allows an authenticated attacker to inject malicious SQL code through unsanitized input fields, which are used directly in SQL queries. Exploiting this flaw can lead to unauthorized database access, data leakage, or modification of records.

• CWE-89

• https://rsjoomla.com/

Published

Jun 5, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-27748Use after free in Microsoft Office allows an unauthorized at…7.8
• CVE-2025-27749Use after free in Microsoft Office allows an unauthorized at…7.8
• CVE-2025-2775SysAid On-Prem versions <= 23.3.40 are vulnerable to an unau…7.5
• CVE-2025-27750Use after free in Microsoft Office Excel allows an unauthori…7.8
• CVE-2025-27751Use after free in Microsoft Office Excel allows an unauthori…7.8
• CVE-2025-27752Heap-based buffer overflow in Microsoft Office Excel allows …7.8
• CVE-2025-27754A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.1…6.5
• CVE-2025-27759An improper neutralization of special elements used in an OS…6.7
• CVE-2025-2776SysAid On-Prem versions <= 23.3.40 are vulnerable to an unau…9.8
• CVE-2025-27760Rejected reason: Not used
• CVE-2025-27761Rejected reason: Not used
• CVE-2025-27762Rejected reason: Not used