CSRF Vulnerability in StageIt Extension for Joomla by php-web-design.com
CVE-2026-103420

7.2HIGH

Key Information:

Vendor

PHP-web-design.com

Status
Stageit Extension For Joomla
Vendor
CVE Published:
2 November 2026

What is CVE-2026-103420?

The StageIt extension for Joomla has been identified to possess a Cross-Site Request Forgery (CSRF) vulnerability that affects various versions between 1.0 and 6.3.5. This weakness allows attackers to execute unauthorized actions on behalf of authenticated users by tricking them into clicking malicious links or loading unsafe resources. The potential for exploitation highlights the need for website administrators to ensure robust security measures are in place when using this extension.

Affected Version(s)

StageIt extension for Joomla 1.0-5.7.5

StageIt extension for Joomla 6.0-6.3.5

References

https://www.php-web-design.com/Information/stageit-6-chan...
product

CVSS V4

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.