CVE-2025-30085 in RSform Pro Component

Resumen

por MITRE • 2025-06-11

Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsable: Joomla
• Reservar: 2025-03-16
• Divulgación: 2025-06-11
• Moderación: aceptado
• Artículo: VDB-312333
• CPE: listo
• CWE: CWE-94 (confirmado)
• CVSS: 4.7 (VulDB)
• EPSS: 0.00472
• KEV: no
• Actividades: muy bajo
• Sector: Hostingprovider

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-30085
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-30085
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-30085/