PT-2026-65793 · Rolandd.Com+1 · Ro Csvi Extension For Joomla+1

CVE-2026-65946

·

Published

2026-07-29

·

Updated

2026-08-05

CVSS v3.1

6.1

Medium

VectorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions RO CSVI versions prior to 9.11.0
Description Cross-Site Scripting (XSS) vectors exist within the AJAX endpoint handlers of the RO CSVI Joomla extension. XSS is a security flaw that allows an attacker to inject malicious scripts into web pages viewed by other users.
Recommendations Update RO CSVI to version 9.11.0 or later.

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-65946

Affected Products

Ro Csvi Extension For Joomla
Ro Csvi