CVE-J2store-2026

J2Store / J2Commerce — CVE-2026-67358–67362 PoC Proof-of-concept material for four vulnerabilities in comj2store J2Commerce J2Store, discovered by Murrez and fixed in:...

CVE-2026-74252

Stored XSS in J2Commerce Guest Checkout via Cookie Filter Bypass J2Commerce comj2store ≤ 4.1.5 — Unauthenticated Attacker Stores XSS Payload That Executes Automatically in Administrator Browser on Page Load SUMMARY J2Commerce 4.1.5 is vulnerable to Stored Cross-Site Scripting XSS through the gues...