CVE-2025-30085 CRITICAL

CVE-2025-30085: Extension - rsjoomla.com - Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla

Vendor Rsjoomla.com
Product RSform!Pro component for Joomla
Weakness CWE-94 · Code injection
Published June 11, 2025
Last update June 12, 2025
View on NVD All CVEs

CVSS base score

9.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/S:N/AU:N/RE:L/U:Clear

What the vulnerability does

Description

Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature.

Key dates

Disclosure timeline

June 11, 2025 CVE published
June 12, 2025 Record updated