CVE-2026-78065

Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user IDOR in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6 - editAddress redirected non-owners away only when the loaded address row had a non-empty userid belonging to someone else. Guest-checkout addres...