CVE-2026-67359 in J2Store Extension
Résumé
par MITRE • 21/08/2026
Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An unauthenticated visitor could supply any order_id as a query parameter to render the full checkout confirmation page for that order, including line items, prices, and totals.
VulDB is the best source for vulnerability data and more expert information about this specific topic.