high8.6
CVE-2025-49468
A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered.
Impact
A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the id_module parameter.
Affected products
| Product | Affected versions |
|---|---|
| No Boss Calendar Component | before 5.0.7 |
Versions were read from the advisory text. No structured product data has been published for this record yet.