CVE-2026-78081 | j2commerce J2Store Extension up to 3.3.2/4.0.22/4.1.7 Cart/Checkout/Myprofile Controllers saveAddress cross-site request forgery

A vulnerability, which was classified as problematic, has been found in j2commerce J2Store Extension up to 3.3.2/4.0.22/4.1.7. Affected by this issue is the function saveAddress of the component Cart/Checkout/Myprofile Controllers. Performing a manipulation results in cross-site request forgery.

This vulnerability is cataloged as CVE-2026-78081. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More