What’s Vulnerable › Products

joomshaper.com SP Property extension for Joomla vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your joomshaper.com SP Property extension for Joomla version is affected

Latest joomshaper.com SP Property extension for Joomla vulnerabilities

• CVE-2026-78085 — Joomla Extension - joomshaper.com - Path Traversal in Gallery Image Management in SP Property < 4.1.4 (CVSS 6.9)
• CVE-2026-78303 — Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4 (CVSS 6.9)
• CVE-2026-78302 — Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4 (CVSS 8.6)
• CVE-2026-78084 — Joomla Extension - joomshaper.com - Missing Access Control in Gallery Image Management in SP Property < 4.1.4 (CVSS 6.9)
• CVE-2026-78083 — Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 (CVSS 7.1)
• CVE-2026-78082 — Joomla Extension - joomshaper.com - Unauthenticated SQL Injection in Property Search and Map Filtering in SP Property < 4.1.4 (CVSS 9.3)