CVE-2025-54473 – Joomla Phoca Commander Authenticated Remote Code Execution

CVE ID : CVE-2025-54473

Published : Aug. 15, 2025, 12:15 p.m. | 1 hour, 44 minutes ago

Description : An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. The issue allows code execution via the unzip feature.

Severity: 9.2 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…