CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/S:N/AU:N/RE:L/U:Clear
What the vulnerability does
Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature.
Explanation of Vulnerability in Simple Terms
RSform!Pro for Joomla contains a code injection vulnerability in versions 3.0.0 through 3.3.14. An authenticated administrator can inject and execute arbitrary PHP code on the site. This requires high-level admin access but allows complete site compromise once exploited.
What an attacker can do
Run arbitrary PHP code on the site with full server privileges.
Potential impact on your site
A compromised admin account can execute malicious code, steal data, modify content, or take the site offline.
Conditions required to exploit
Attacker must have administrator-level access to the Joomla site.
Key dates
External resources
Related vulnerabilities
