CVE-2025-54299: Nobossextensions.com No Boss Testimonials Component For Joomla

Critical severity, CVSS 9.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A stored XSS vulnerability in No Boss Testimonials component 1.0.0-3.0.0 and 4.0.0-4.0.2 for Joomla was discovered.

Affected products

• Nobossextensions.com No Boss Testimonials Component For Joomla: version 4.0.0-4.0.2 only; version 1.0.0-3.0.0 only

Published 2025-07-28. Last modified 2026-06-17.