Sourcerer
1 CVEs
product
Monthly
Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
RCE
Code Injection
Sourcerer
Joomla
NVD
CVSS 3.1
9.8
EPSS
4.3%
CVE-2025-22204
EPSS 4%
CVSS 9.8
CRITICAL
Act Now
Improper control of generation of code in the sourcerer extension for Joomla in versions before 11.0.0 lead to a remote code execution vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
RCE
Code Injection
Sourcerer
+1
NVD