2 matches found
EUVD-2026-62498
Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory 6.2.3 - Recipient address was taken from the request contactidoffer / contactidevent instead of the server-side offer/event record, so mail could be sent to an arbitrary address...
5.5AI score0.00416EPSS
SaveExploits0References1
CVE-2026-75953: Insertion of Sensitive Information Into Sent Data
Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory 6.2.3 - Recipient address was taken from the request contactidoffer / contactidevent instead of the server-side offer/event record, so mail could be sent to an arbitrary address...
7.5CVSS5.9AI score0.00416EPSS
SaveExploits0References2
20