CVE-2025-55758

MediumCVSS 5.4/10Last modified Oct 8, 2026

Description

Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-352

Affected software

No affected versions have been published.

Timeline

Published
Oct 28, 2025
Last modified
Oct 8, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-55769.8A vulnerability, which was classified as critical, has been found in PHPGurukul Dairy Farm Shop Management System 1.3. This issue affects soCVE-2025-557637.5Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote code execution via a craCVE-2025-55779.8A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown funCVE-2025-55789.8A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerabilitCVE-2025-557807.5A null pointer dereference occurs in the function break_word_for_overflow_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document. SCVE-2025-557879.8In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.CVE-2025-55799.8A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this issue is some unkCVE-2025-557953.5The openml/openml.org web application version v2.0.20241110 uses incremental user IDs and insufficient email ownership verification during eCVE-2025-557967.5The openml/openml.org web application version v2.0.20241110 uses predictable MD5-based tokens for critical user workflows such as signup conCVE-2025-557976.5An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers CVE-2025-55809.8A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been classified as critical. This affects an unknown part oCVE-2025-55819.8A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been declared as critical. This vulnerability affects unkno
CVE-2025-55758: Medium severity, CVSS 5.4 | Vulnix