CSRF Vulnerability in Joomla Extension Easy Store by JoomShaper

CVE-2026-90900

What is CVE-2026-90900?

The Easy Store extension for Joomla by JoomShaper contains a vulnerability where the product review submission process lacks mandatory CSRF token verification. Specifically, the check for an anti-CSRF token was commented out in the source code, exposing users to potential unauthorized review submissions. This could allow attackers to exploit the vulnerability by tricking logged-in users into submitting false reviews or spam via cross-site requests. The vulnerability has been addressed by implementing strict token verification methods, ensuring that all review submissions are authenticated and secure.

References