https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T15:39:34.252234+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-78302 CVE-2026-78302 — Joomla Extension - joomshaper.com - Unauthenticated Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin… 2026-09-29T15:39:34.266430+00:00

Affected: joomshaper.com SP Property extension for Joomla

Joomla Extension - joomshaper.com - Unauthenticated Stored Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4 - Multiple template files across frontend views and administrator list tables rendered attributes and text values directly into HTML without contextual escaping.