CSRF Vulnerability in SP Property by JoomShaper
CVE-2026-78083

7.1HIGH

Key Information:

Vendor

Joomshaper.com

Status
Sp Property Extension For Joomla
Vendor
CVE Published:
10 September 2026

What is CVE-2026-78083?

SP Property, a Joomla extension developed by JoomShaper, is affected by a Cross-Site Request Forgery vulnerability due to missing verification of CSRF tokens in certain endpoints. The lack of token validation in the booking and agent contact form submission endpoints allows malicious actors to send unauthorized POST requests, potentially leading to unintended actions on behalf of authenticated users.

Affected Version(s)

SP Property extension for Joomla 1.0.0-4.1.3

References

https://www.joomshaper.com/joomla-extensions/sp-property
product

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.