J-BusinessDirectory extension for Joomla — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in J-BusinessDirectory extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

Vendor: cmsjunkie.com

CVE ID	Title	CVSS	Severity	Published
CVE-2026-75952	Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3 CWE-352	4.6	Medium	2026-08-19
CVE-2026-75953	Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3 CWE-201	-	-	2026-08-19
CVE-2026-75955	Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3 CWE-79	5.1	Medium	2026-08-19
CVE-2026-75951	Joomla Extension - cmsjunkie.com - Insecure Direct Object Reference (multiple frontend/API actions) in J-BusinessDirectory < 6.2.3 CWE-639	6.9	Medium	2026-08-19
CVE-2026-75956	Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3 CWE-770	8.7	High	2026-08-19
CVE-2026-75954	Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3 CWE-89	9.3	Critical	2026-08-19
CVE-2026-75949	Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3 CWE-434	10.0	Critical	2026-08-19
CVE-2026-75950	Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory < 6.2.3 CWE-284	6.9	Medium	2026-08-19

All 8 known CVE vulnerabilities affecting J-BusinessDirectory extension for Joomla with full Chinese analysis, references, and POCs where available.