CVE-2025-30085: Extension - rsjoomla.com - Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla

Severity: critical (CVSS 9.2 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-11 · updated 2026-06-17
Weakness: CWE-94

Description

Remote code execution vulnerability in RSForm!pro component 3.0.0 - 3.3.14 for Joomla was discovered. The issue occurs within the submission export feature and requires administrative access to the export feature.

Affected products

rsjoomla.com RSform!Pro component for Joomla: 3.0.0-3.3.14

References

https://rsjoomla.com/

Get alerted when CVE-2025-30085 or the next vulnerability affects your stack