SQL Injection in Stackideas.com Komento Component For Joomla

CVE-2025-54294

A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands.

Vulnerability class: SQL Injection

EPSS: 0.003 (24.3th percentile) — read the EPSS interpretation.