Skip to content
OpenAdvisories

Vendor

cmsjunkie.com

8 known vulnerabilities.

Products

J-BusinessDirectory extension for Joomla 8
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.6
    CVE-2026-75952

    Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3

    Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3 - Tokens were missing on many AJAX/state-changing tasks: contact/quote forms, cart, bookmarks, uploads, messages, AI text generation, and several administrator action…

    cmsjunkie.com J-BusinessDirectory extension for Joomla Web / CMS
  • Medium 5.1
    CVE-2026-75955

    Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3

    Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3 - companyName from the request was written unescaped into an XML attribute.

    cmsjunkie.com J-BusinessDirectory extension for Joomla Web / CMS
  • Medium 6.9
    CVE-2026-75951

    Joomla Extension - cmsjunkie.com - Insecure Direct Object Reference (multiple frontend/API actions) in J-BusinessDirectory < 6.2.3

    Joomla Extension - cmsjunkie.com - Insecure Direct Object Reference (multiple frontend/API actions) in J-BusinessDirectory < 6.2.3

    cmsjunkie.com J-BusinessDirectory extension for Joomla Web / CMS
  • Medium 6.9
    CVE-2026-75950

    Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory < 6.2.3

    Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory < 6.2.3 - Ownership could be changed using attacker-supplied company and user IDs, including for listings that already had an owner. 6.2.3 binds the action to…

    cmsjunkie.com J-BusinessDirectory extension for Joomla Web / CMS