Vulnerabilities in cmsjunkie.com
8 resultsVexday analysis
A plataforma CMS Junkie apresenta 8 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando descobertas recentes e potencialmente ainda em fase de correção. Embora nenhuma esteja sob exploração ativa conhecida (KEV), 2 falhas atingem nível crítico, com a fraqueza dominante relacionada a controle de acesso (CWE-639), que historicamente representa risco significativo. O volume concentrado de divulgações recentes recomenda priorização de patch management neste fornecedor.
CVE-2026-75955MEDIUMJoomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3EPSS 0.3%CVE-2026-75949CRITICALJoomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3EPSS 0.3%CVE-2026-75956HIGHJoomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3EPSS 0.3%CVE-2026-75953HIGHJoomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3EPSS 0.3%CVE-2026-75950MEDIUMJoomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory < 6.2.3EPSS 0.3%CVE-2026-75951MEDIUMJoomla Extension - cmsjunkie.com - Insecure Direct Object Reference (multiple frontend/API actions) in J-BusinessDirectory < 6.2.3EPSS 0.3%CVE-2026-75954CRITICALJoomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3EPSS 0.3%CVE-2026-75952MEDIUMJoomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3EPSS 0.2%