Auth bypass in Cmsjunkie.com J-Businessdirectory Extension For Joomla

CVE-2026-75951

Joomla Extension - cmsjunkie.com - Insecure Direct Object Reference (multiple frontend/API actions) in J-BusinessDirectory < 6.2.3

Vulnerability class: IDOR (Insecure Direct Object Reference)

Affected products

Cmsjunkie.com J-businessdirectory Extension For Joomla — versions 1.0.0-6.2.2

Weakness classification (CWE)

CWE-639 — Authorization Bypass Through User-Controlled Key

References

security@joomla.org (product)