SP Property extension for Joomla — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in SP Property extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-78085	Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4 CWE-22	6.9	Medium	2026-09-10
CVE-2026-78302	Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4 CWE-79	8.6	High	2026-09-10
CVE-2026-78083	Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 CWE-352	7.1	High	2026-09-10
CVE-2026-78084	Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 CWE-284	6.9	Medium	2026-09-10
CVE-2026-78082	Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4 CWE-89	9.3	Critical	2026-09-10
CVE-2026-78303	Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4 CWE-201	6.9	Medium	2026-09-10

All 6 known CVE vulnerabilities affecting SP Property extension for Joomla with full Chinese analysis, references, and POCs where available.