CVE-2026-90904 | Joomshaper Easy Store Extension 1.0.0-3.0.0 ApiController ApiController.php allowEdit access control

A vulnerability classified as critical has been found in Joomshaper Easy Store Extension 1.0.0-3.0.0. Affected by this issue is the function allowEdit of the file ApiController.php of the component ApiController. This manipulation causes improper access controls.

This vulnerability is registered as CVE-2026-90904. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More