Joomla Extension Vulnerability in J2Store by j2commerce.com
CVE-2026-82191

5.3MEDIUM

Key Information:

Vendor

J2commerce.com

Status
J2store Extension For Joomla
Vendor
CVE Published:
15 September 2026

What is CVE-2026-82191?

The J2Store plugin for Joomla is susceptible to a vulnerability that allows attackers to manipulate query parameters through crafted links to the PayPal notify endpoint. When a user or automated system follows such a link, the subsequent redirect can include attacker-controlled parameters, which can lead to unanticipated behavior in the checkout process. While this vulnerability requires user interaction to exploit, understanding the implications of such parameter injections is crucial for securing Joomla-based eCommerce sites.

Affected Version(s)

J2Store extension for Joomla 1.0.0-3.3.22

J2Store extension for Joomla 4.0.0-4.0.22

J2Store extension for Joomla 4.1.0-4.1.7

References

https://www.j2commerce.com/
product

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phil Taylor, mysites.guru
.