CVE-2026-65761

Vulnerability Description

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.

Vulnerability Details

Published Date

July 23, 2026

Last Modified

July 23, 2026

CWE ID

CWE-89

Source

NVD

Vendor

joomshaper.com

Product

Easy Store extension for Joomla

External References

https://mysites.guru/blog/easystore-security-disclosure/
https://www.joomshaper.com/easystore

CVE-2026-65761

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment