Threats tagged 'ghsa-pmm5-h3g5-rm6q'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-105605Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3 Medium5.32026-11-02GCVE DatabaseCVE-2026-105605 An IDOR vulnerability in DJ-Classifieds Joomla extension versions prior to 3.11.3 allows any logged-in user to access full content of other users' ads, including private details like phone number, address, email, and price. This occurs because the 'duplicate my ad' feature loads ads by numeric ID without verifying ownership or publication status. Report on CVE-2026-105605 Vulnerability CWE-639 #ghsa-pmm5-h3g5-rm6q	GCVE Database	2026-11-02

Page 1 of 1