CVE-2026-78083 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 - The visitor booking (properties.booking) and agent contact form submission (agents.sendmail) endpoints processed POST requests without verifying Joomla session anti-CSRF tokens.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-352	Cross-Site Request Forgery The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

참고 자료

https://www.joomshaper.com/joomla-extensions/sp-property