CVE-2026-75951

MediumCVSS 6.9

Published: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Summary

Joomla extension J-BusinessDirectory before version 6.2.3 contains an Insecure Direct Object Reference (IDOR) vulnerability in multiple frontend/API actions. This vulnerability allows direct object references without proper authorization.

Risk Assessment

An attacker can access unauthorized resources or data of other users, potentially leading to confidentiality and integrity breaches.

Recommendation

Update J-BusinessDirectory to version 6.2.3 or later, which includes fixes for the IDOR vulnerability. Conduct a code audit for similar issues.

Original NVD description (English source)

Joomla Extension - cmsjunkie.com - Insecure Direct Object Reference (multiple frontend/API actions) in J-BusinessDirectory < 6.2.3