XSS in Norrnext.com Quantum Mamanger Component For Joomla

CVE-2025-54300

A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered. The SVG upload feature does not sanitize uploads.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (24.2th percentile) — read the EPSS interpretation.