Advisories · Technology
joomshaper.com SP Property extension for Joomla.
Every CVE that names joomshaper.com SP Property extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4
- joomshaper.com SP Property extension for Joomla
- Path traversal
- CVSS 8.6 High
Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4
- joomshaper.com SP Property extension for Joomla
- Cross-site scripting (XSS)
- CVSS 7.1 High
Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4
- joomshaper.com SP Property extension for Joomla
- Cross-site request forgery (CSRF)
- CVSS 6.9 Medium
Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4
- joomshaper.com SP Property extension for Joomla
- Broken access control
- Cross-site request forgery (CSRF)
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4
- joomshaper.com SP Property extension for Joomla
- SQL injection
- CVSS 6.9 Medium
Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4
- joomshaper.com SP Property extension for Joomla
- Information disclosure