CVE Watch23 jul 2026

CVE-2026-65761

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order paramet

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 23 jul 2026 · Última mod.: 23 jul 2026 · CWE-89

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-655327.6 ALT

—

——0Shop manager SQL Injection in Persian Woocommerce SMS <= 7.2.2 versions.4h CVE-2026-655268.5 ALT

—

——0Contributor SQL Injection in Visualizer <= 4.0.6 versions.4h CVE-2026-654947.1 ALT

—

——0Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions.6h CVE-2026-654627.6 ALT

—

——0Administrator SQL Injection in Uncanny Automator <= 7.3.2 versions.5h CVE-2026-654548.5 ALT

—

——0Contributor SQL Injection in Quiz And Survey Master <= 11.2.0 versions.4h CVE-2026-654518.5 ALT

—

——0Contributor SQL Injection in MapSVG <= 8.14.0 versions.6h