PT-2026-78449 · Cmsjunkie.Com · J-Businessdirectory Extension For Joomla

CVE-2026-75950

·

Published

2026-08-19

·

Updated

2026-08-19

CVSS v4.0

6.9

Medium

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory < 6.2.3 - Ownership could be changed using attacker-supplied company and user IDs, including for listings that already had an owner. 6.2.3 binds the action to the authenticated user and only allows unowned listings.

Fix

IDOR

Improper Access Control

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-639CWE-284

Related Identifiers

CVE-2026-75950

Affected Products

J-Businessdirectory Extension For Joomla