EUVD-2026-75391
GHSA-3576-2p3h-9f2r
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network attack, no attacker privileges, but passive victim interaction required (UI:R); only integrity impacted via forged submissions, no confidentiality or availability loss.
Primary rating from Vendor (joomla).
CVSS VectorVendor: joomla
Lifecycle Timeline
3DescriptionCVE.org
Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 - The visitor booking (properties.booking) and agent contact form submission (agents.sendmail) endpoints processed POST requests without verifying Joomla session anti-CSRF tokens.
AnalysisAI
Cross-site request forgery in SP Property (a Joomla real estate extension by joomshaper.com) before version 4.1.4 allows unauthenticated attackers to forge POST requests against two unprotected endpoints. The visitor property booking endpoint (properties.booking) and agent contact form endpoint (agents.sendmail) both processed POST submissions without validating Joomla's built-in session anti-CSRF tokens, enabling an attacker who tricks a site visitor into loading a malicious page to submit fraudulent bookings or send arbitrary contact messages on that visitor's behalf. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The victim must visit or load a page controlled by the attacker while their browser has an active session (or even just a valid browser context) for the target Joomla site running the vulnerable SP Property extension. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 7.1 (AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N) reflects a realistic threat model: the attacker requires no authentication and the attack is low-complexity, but passive user interaction (the victim visiting or loading a malicious resource) is a hard prerequisite. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade SP Property to version 4.1.4 or later, which restores Joomla session anti-CSRF token validation on the properties.booking and agents.sendmail endpoints. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
No public exploit has been identified at time of analysis, but this unauthenticated CSRF vulnerability represents a significant risk given its ease of exploitation. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra para
SQL injection vulnerability in Joomla!. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable,
The isMail transport in PHPMailer before 5.2.20 might allow remote attackers to pass extra parameters to the mail comman
Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public explo
SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated
The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla!. Rated
SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.p
SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low
administrator/components/com_media/helpers/media.php in the media manager in Joomla!. Rated medium severity (CVSS 6.8),
Akeeba Restore (restore.php), as used in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploit
SQL injection vulnerability in Joomla!. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low
Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today