Arbitrary File Read Vulnerability in J2Store by Joomla Extension
CVE-2026-81568

8.7HIGH

Key Information:

Vendor

J2commerce.com

Status
J2store Extension For Joomla
Vendor
CVE Published:
15 September 2026

What is CVE-2026-81568?

The J2Store Joomla extension is susceptible to an arbitrary file read vulnerability due to improper path validation. Specifically, the method J2StoreModelOrderdownloads::getFilePath() combines the configured attachment folder with the stored product file names without adequately preventing directory traversal. If the product_file_save_name contains a ../ sequence, it may allow unauthorized access to files outside the intended directory. This issue can lead to exposure of sensitive server files, particularly if coupled with potential cross-site request forgery (CSRF) risks in admin operations. Users with valid download tokens for these products could exploit this vulnerability, resulting in critical data exposure.

Affected Version(s)

J2Store extension for Joomla 1.0.0-3.3.22

J2Store extension for Joomla 4.0.0-4.0.22

J2Store extension for Joomla 4.1.0-4.1.7

References

https://www.j2commerce.com/
product

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phil Taylor, mysites.guru
.