CVE-2026-78064

CVE-2026-78064 affects the J2Store Joomla extension (j2commerce.com) in versions 1.0.0–3.3.21, 4.0.0–4.0.21, and 4.1.0–4.1.6 . The vulnerability stems from fof.xml granting the carts view a wildcard true ACL, while FOF enforces CSRF tokens only on back-end HTML requests—not on front-end format=ra...