CVE-2025-54296CWE-79

Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla

High · published July 23, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
16.3
In the wild
Unconfirmed
What it is

A stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla was discovered.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00256 · 16.3th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-07-23T11:15Z
EPSS history
Timeline
  • 23 JUL 11:15Z
    Extension - mooj.org - Stored XSS vulnerability in ProFiles component 1.0-1.5.0 for Joomla
    cvelistv5