CVE-2025-27445: Rsjoomla.com Rsfirewall Component For Joomla

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary files outside the Joomla root directory. The flaw is caused by insufficient sanitization of user-supplied input in file path parameters, allowing attackers to exploit directory traversal sequences (e.g., ../) to access sensitive files

Affected products

• Rsjoomla.com Rsfirewall Component For Joomla: version 2.9.7-3.1.5 only

Published 2025-06-05. Last modified 2026-06-17.