J2Store extension for Joomla — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in J2Store extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-67361	Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 CWE-352	6.9	Medium	2026-08-21
CVE-2026-74252	Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 CWE-79	8.6	High	2026-08-21
CVE-2026-67358	Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 CWE-639	5.3	Medium	2026-08-21
CVE-2026-67362	Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 CWE-601	5.1	Medium	2026-08-21
CVE-2026-67359	Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 CWE-639	8.7	High	2026-08-21
CVE-2026-67360	Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 CWE-639	6.3	Medium	2026-08-21

All 6 known CVE vulnerabilities affecting J2Store extension for Joomla with full Chinese analysis, references, and POCs where available.