Medium · 5.1 CVE-2026-75955 EUVD-2026-62496GHSA-w3g2-vx6q-74fj

Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3

Published Aug 19, 2026 · Updated Aug 21, 2026 · Assigned by Joomla

Vendor: cmsjunkie.com Product: J-BusinessDirectory extension for Joomla Category: Web / CMS

Description

Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3 - companyName from the request was written unescaped into an XML attribute.

Affected products

Vendor	Product	Affected	Fixed
cmsjunkie.com	J-BusinessDirectory extension for Joomla	1.0.0-6.2.2	—

References

https://www.cmsjunkie.com/ product