Stored XSS Vulnerability in CComment for Joomla by Compojoom
CVE-2025-54297

7HIGH

Key Information:

Vendor

Compojoom.com

Status
Ccomment Component For Joomla
Vendor
CVE Published:
23 July 2025

What is CVE-2025-54297?

A stored XSS vulnerability has been identified in the CComment component for Joomla, allowing attackers to inject malicious scripts. This issue affects versions 5.0.0 through 6.1.14, enabling unauthorized access and potential manipulation of user data. Prompt patching is recommended to mitigate risks associated with this vulnerability.

Affected Version(s)

CComment component for Joomla 5.0.0-6.1.14

References

https://compojoom.com/
product

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sebastian JeĹĽ
.
CVE-2025-54297 : Stored XSS Vulnerability in CComment for Joomla by Compojoom