PT-2026-61685
CVE-2026-61901
·
Published
2026-07-20
·
Updated
2026-07-21
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Hikashop versions prior to 6.5.2
Description
The Joomla extension Hikashop is susceptible to an open redirect, which occurs when an application redirects a user to an untrusted external site without sufficient validation of the destination URL.
Recommendations
Update Hikashop to version 6.5.2 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾