Paper/Archive/CVE-2025-54299

CVE-2025-54299

nobossextensions.com No Boss Testimonials component for Joomla — Extension - nobossextensions.com - Stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla

EPSS 0.5%CVSS 9.4

critical.is priorityof 100

CVSS 9.4 (CNA)9.4 / 10 × 3028.2 Not in CISA KEV+300.0 EPSS percentile 41.2.412 × 208.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered.

Affected

ProductAffectedFixed inSource

No Boss Testimonials component for Joomla4.0.0-4.0.2–CNA

No Boss Testimonials component for Joomla1.0.0-3.0.0–CNA

Scores by source

Joomla (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refnobossextensions.com