XSS in Norrnext.com Quantum Mamanger Component For Joomla
CVE-2025-54301
A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered. File names are not properly escaped.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (24.2th percentile) — read the EPSS interpretation.
Affected products
- Norrnext.com Quantum Mamanger Component For Joomla — versions 1.0.0-3.2.0
Weakness classification (CWE)
References
- security@joomla.org (product)