CVE-2018-25354

MEDIUM SEVERITY

CVSS Score & Metrics

Base Score

4.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N                                    

Vulnerability Description

Joomla Component jomres 9.11.2 contains a cross-site request forgery vulnerability that allows attackers to modify user account information by tricking authenticated users into visiting malicious pages. Attackers can craft HTML forms targeting the account/index endpoint with hidden fields to change passwords, email addresses, and profile details without user consent.

Vulnerability Details

Published Date

May 23, 2026

Last Modified

May 23, 2026

CWE ID

CWE-352

Source

NVD

External References

https://extensions.joomla.org/extension/jomres/
https://www.exploit-db.com/exploits/44901
https://www.jomres.net/
https://www.vulncheck.com/advisories/joomla-component-jomres-cross-site-request-forgery

CVE-2018-25354

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment