Multiple CSRF Vulnerabilities in JDownloads for Joomla
CVE-2025-55758

5.4MEDIUM

Key Information:

Vendor

Jdownloads.com

Status
Jdownloads Component For Joomla
Vendor
CVE Published:
28 October 2025

What is CVE-2025-55758?

The JDownloads component for Joomla has been found to contain multiple CSRF attack vectors, which could allow an attacker to perform unauthorized actions on behalf of users without their consent. This vulnerability affects versions ranging from 1.0.0 to 4.0.47, highlighting the importance of applying security patches and updates to maintain the integrity of Joomla-based websites.

Affected Version(s)

JDownloads component for Joomla 1.0.0-4.0.47

References

https://jdownloads.com/
product

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sebastian Jeż
.