Stored XSS Vulnerability in RSMail! Component for Joomla by RSJoomla

CVE-2025-30084

What is CVE-2025-30084?

A stored XSS vulnerability exists in the RSMail! component versions 1.19.20 through 1.22.26 for Joomla. This issue arises within the administrative dashboard, where inputs provided by users are inadequately sanitized before being stored. Malicious actors may exploit this vulnerability by injecting harmful JavaScript into text fields. When other users interact with these affected components, the injected script executes in their browsers, potentially leading to unauthorized actions or data leakage. It is crucial for Joomla site administrators using the RSMail! component to ensure their systems are updated to the latest versions and to implement security measures to mitigate such vulnerabilities.

References