NVD Description

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.

Public Exploits & PoCs2 found

[POC] GHSA-3whf-vgf2-9w6g — CVE-2026-65761

Proof of Concept for CVE-2026-65761 - EasyStore Pro Unauthenticated SQL Injection via `filter_sortby`

[POC] GHSA-652q-gvq3-74qv — CVE-2026-65761

EasyStore Joomla Pre-Auth SQL Injection via filter_sortby Direction (CVE-2026-65761, CVSS 9.3)

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free