A vulnerability classified as critical has been found in nobossextensions No Boss Calendar Component up to 5.0.6 on Joomla. This affects an unknown part. The manipulation of the argument id_module leads to sql injection.
This vulnerability is uniquely identified as CVE-2025-49468. It is possible to initiate the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.
