Cmsjunkie

9 CVEs across 9 Cmsjunkie products. Browse Cmsjunkie vulnerabilities, severities, and proof-of-concept exploits.

Cmsjunkie products with known CVEs

ProductCVEs
J-Businessdirectory2
J-Classifiedsmanager2
Businessdirectory1
Classifiedsmanager1
Cruiseportal1
J-Cruiseportal1
Jhotelreservation1
Multiplehotelreservation1
Wp-Businessdirectory – Business Directory Plugin For WordPress1
Cmsjunkie CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-6070Critical9.12026-07-01The WP-BusinessDirectory plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Deletion in versions up to and including 4.0.1. This is due to in…
CVE-2019-25752High8.22026-06-19Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by i…
CVE-2019-25751High8.22026-06-19Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by i…
CVE-2019-25750High8.22026-06-19Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL querie…
CVE-2019-25749High7.12026-06-19Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious…
CVE-2019-25748High8.22026-06-19Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting mali…
CVE-2020-5182Medium6.52020-02-03The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered b…
CVE-2015-14782015-02-04Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to inject arbitrary web script or…
CVE-2015-14772015-02-04SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id pa…