SQL Injection Vulnerability in RSMediaGallery! for Joomla
CVE-2025-32466

6.7MEDIUM

Key Information:

Vendor

Rsjoomla.com

Status
Rsmediagallery Component For Joomla
Vendor
CVE Published:
11 June 2025

What is CVE-2025-32466?

A vulnerability has been identified in the RSMediaGallery! component for Joomla, where user input in the dashboard is not properly sanitized. This oversight permits an attacker to insert malicious SQL queries through user-supplied input fields. Consequently, when other users access the affected sections of the dashboard, crafted scripts are executed in their browsers, posing significant security risks. It is crucial for users and administrators of RSMediaGallery! to ensure timely updates and proper input validation measures are implemented.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

RSMediaGallery component for Joomla 1.7.4-2.1.7

References

https://rsjoomla.com/
product

CVSS V4

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kamil Szczurowski
Robert Kruczek
JSON
.