CVE-2020-5182: Cmsjunkie J-Businessdirectory

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" (or similar attributes such as noreferrer), the tabnabbing may occur. To reproduce the bug, create a business with a website link that contains JavaScript to exploit the window.opener property (for example, by setting window.opener.location).

Affected products

• Cmsjunkie J-Businessdirectory: before 5.2.9 (fixed in 5.2.9)

Published 2020-02-03. Last modified 2026-06-17.