Open Redirect Vulnerability in J2Store Joomla Extension by J2Commerce

CVE-2026-67362

What is CVE-2026-67362?

The J2Store extension for Joomla suffers from an open redirect vulnerability due to improper validation of user input in the cart controller. Specifically, four task handlers allow base64-encoded URLs to be accepted and redirected without checking the destination. This flaw can be exploited to facilitate phishing attacks using the shop's trusted domain, as no authentication is required for redirection, compromising user safety and trust.

References