CVE-2026-75955
CVE-2026-75955
Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3 - companyName from the request was written unescaped into an XML attribute.
Vulnerability class: XSS (Cross-Site Scripting)
Weakness classification (CWE)
References
- security@joomla.org (product)