EUVD-2026-47910
GHSA-v9cq-rff8-vgf3
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from Vendor (Joomla) · only source for this CVE.
CVSS VectorVendor: Joomla
Lifecycle Timeline
4DescriptionCVE.org
Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates.
AnalysisAI
Unauthorized database updates can be triggered via CSRF in the GeoIP extension for Joomla, affecting versions 1.0.0 through 6.3.8. An attacker can trick a logged-in Joomla administrator into submitting a request that performs unauthorized database modifications, potentially compromising all data confidentiality, integrity, and availability. EPSS indicates a low 0.13% exploitation probability, and no active exploitation or public exploit is known at this time.
More in Geoip Extension For Joomla
View allUnsafe file extraction in the Joomla GeoIP extension (versions 1.0.0-6.3.8) enables remote code execution by writing fil
Broken CSRF token enforcement across 23 Regular Labs AJAX-based Joomla extensions allows authenticated lower-privileged
Information disclosure in the GeoIP extension for Joomla 1.0.0 through 6.3.8 exposes MaxMind API credentials directly in
GeoIP rule bypass in Joomla Geo
Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today