2 matches found
EUVD-2026-85550
Joomla Extension - joomshaper.com - Broken Access Control ACL Bypass in ApiController Record Editing in Easy Store extension 1.0.0-3.0.0 - The allowEdit method in ApiController.php hardcoded return true;, bypassing Joomla component-level and asset-level ACL permission checks. Any authenticated...
8.6CVSS5.9AI score0.00313EPSS
SaveExploits0References1
PT-2021-16079
Name of the Vulnerable Software and Affected Versions Software License Manager versions prior to 4.4.8 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the edit record parameter is not properly sanitized or escaped before being outputted back in the...
6.1CVSS0.00726EPSS
SaveExploits1References3
20