CVE-2025-30085criticalCWE-94

CVE-2025-30085: critical vulnerability in rsjoomla.com RSform!Pro component for Joomla

Extension - rsjoomla.com - Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla

Published · Updated

Follow this CVE+ Monitor RSform!Pro component for Joomla

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.2epss 0.6%
Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/S:N/AU:N/RE:L/U:Clear
Affected products
rsjoomla.com · RSform!Pro component for Joomla
Related CVEs — rsjoomla.com RSform!Pro component for Joomla

In the same product, most dangerous first.

CVE-2025-27444MEDIUMExtension - rsjoomla.com - A reflected XSS vulnerability RSform!Pro component 3.0.0 - 3.3.13 for JoomlaEPSS 0.3%