CVE-2026-75953

EPSS 0.15%
Veröffentlicht 19.08.2026 14:45:26
Zuletzt bearbeitet 19.08.2026 15:18:09
CVE-Watchlists
Login
Unerledigt
Login

Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3

Joomla Extension - cmsjunkie.com -  Open mail relay in J-BusinessDirectory < 6.2.3 - Recipient address was taken from the request (contact_id_offer / contact_id_event) instead of the server-side offer/event record, so mail could be sent to an arbitrary address.

Betroffene Produkte Warnungen 0 Metriken 1 CWE 1 Referenzen 4

CNA 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

Herstellercmsjunkie.com

≫

Produkt J-BusinessDirectory extension for Joomla

Default Statusunaffected

Version 1.0.0-6.2.2

Status affected

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.15%	0.047

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String

CWE-201 Insertion of Sensitive Information Into Sent Data

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

https://www.cmsjunkie.com/

https://nvd.nist.gov/vuln/detail/CVE-2026-75953

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-75953

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-75953

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-75953