SP Property extension for Joomla vulnerabilities | LiveThreat CVE Feed

Product

SP Property extension for Joomla

by joomshaper.com · last CVE Sep 10, 2026

CVEs

On KEV

9.3

Max CVSS

New 30D

Severity mix

Critical 1High 2Medium 3Low 0

Severity

Exploitation

Watch

Add SP Property extension for Joomla to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-78302	8.6	0%	Sep 10	Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4 Affected: 1.0.0-4.1.3
CVE-2026-78083	7.1	0%	Sep 10	Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 Affected: 1.0.0-4.1.3