PT-2026-97512 · Joomla · Easy Store
CVE-2026-90900
·
Published
2026-09-23
·
Updated
2026-09-23
CVSS v4.0
5.3
Medium
| Vector | AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Easy Store extension versions 1.0.0 through 3.0.0
Description
The product review submission endpoint 'index.php?option=com easystore&task=product.addReview' fails to verify anti-CSRF tokens because the check was commented out in the code. This allows an attacker to trick authenticated users into submitting unauthorized product reviews or spam through cross-site requests. Cross-Site Request Forgery (CSRF) is a technique where a malicious website causes a user's browser to perform an unwanted action on a different website where the user is currently authenticated.
Recommendations
Update Easy Store extension to a version where
Session::checkToken('request') and Session::checkToken('post') are enforced in the ProductController, HTMLHelper:: ('form.token') is injected into the review form template, and the session token is appended to the submission payload in review-form.js for versions 1.0.0 through 3.0.0.Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Easy Store