CVE-2026-74252 | J2Commerce J2Store Extension 1.0.0-3.3.20/4.0.0-4.0.20/4.1.0-4.1.5 Guest checkout Input::getArray cross site scripting

A vulnerability classified as problematic has been found in J2Commerce J2Store Extension 1.0.0-3.3.20/4.0.0-4.0.20/4.1.0-4.1.5. This impacts the function Input::getArray of the component Guest checkout. This manipulation causes cross site scripting.

This vulnerability appears as CVE-2026-74252. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More