The Easy Store extension for Joomla (versions 1.0.0 to 3.0.0) contains a CSRF vulnerability in the endpoint administrator/index.php?option=com_easystore&task=appconfig.updateConfiguration. This endpoint updates core Joomla mail configuration parameters (fromname, mailfrom) without validating anti-CSRF tokens or confirming administrative permissions (canAdmin). An attacker could exploit this by sending forged requests from an admin's browser to silently modify the site's mail sender details. The vulnerability is addressed by adding Session::checkToken('request') / Session::checkToken('post') and explicit administrative authorization checks via AccessControl::create()->canAdmin().

An attacker can exploit this vulnerability to change the Joomla site's mail sender name and email address without proper authorization. This could lead to phishing or spoofing attacks by manipulating email communications originating from the site. However, exploitation requires the victim to be an authenticated administrator who visits a malicious site.

A fix is available that enforces anti-CSRF token validation and administrative permission checks before updating mail configuration settings. Users should upgrade to a patched version of the Easy Store extension that includes these security controls. Until patched, administrators should avoid visiting untrusted sites while logged into Joomla to reduce risk.