CVE-2026-75953: Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3

Q: What capability does an attacker need to abuse this issue?

The attacker needs to be able to submit a request containing the contact_id_offer or contact_id_event recipient-address parameter. The vulnerable logic uses that request-supplied address rather than the recipient stored in the server-side offer or event record.

Q: What is the impact of successful exploitation?

An attacker can cause the affected J-BusinessDirectory installation to send email to arbitrary recipient addresses, effectively using it as an open mail relay.

Q: Which versions are affected?

J-BusinessDirectory versions earlier than 6.2.3 are affected. Upgrading to 6.2.3 or later addresses the affected version range.

Published Aug 19, 2026

Updated

Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3 - Recipient address was taken from the request (contactidoffer / contactidevent) instead of the server-side offer/event record, so mail could be sent to an arbitrary address.

Affected Software

1 affected component

J-BusinessDirectory<6.2.3

Event History

Aug 19, 2026

CVE Published

via MITRE·02:45 PM

Data Sourced

via MITRE·02:45 PM

DescriptionWeakness

Frequently Asked Questions

What capability does an attacker need to abuse this issue?

The attacker needs to be able to submit a request containing the contact_id_offer or contact_id_event recipient-address parameter. The vulnerable logic uses that request-supplied address rather than the recipient stored in the server-side offer or event record.

What is the impact of successful exploitation?

An attacker can cause the affected J-BusinessDirectory installation to send email to arbitrary recipient addresses, effectively using it as an open mail relay.

Which versions are affected?

J-BusinessDirectory versions earlier than 6.2.3 are affected. Upgrading to 6.2.3 or later addresses the affected version range.