CVE-2026-78082 | Joomshaper SP Property Extension up to 4.1.3 Property Search/Listing Query Builder sql injection

September 10, 2026 Yanac

A vulnerability classified as critical has been found in Joomshaper SP Property Extension up to 4.1.3. This vulnerability affects unknown code of the component Property Search/Listing Query Builder. Performing a manipulation of the argument zipcode/sorting/price_range_dropdown/psize_range_dropdown results in sql injection.

This vulnerability is cataloged as CVE-2026-78082. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More