CVE-2026-61901: Hikashop.com Hikashop Extension For Joomla

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2 - The Joomla extension Hikashop is vulnerable to an open redirect.

Affected products

• Hikashop.com Hikashop Extension For Joomla: version 1.0.0-6.5.1 only

Published 2026-07-20. Last modified 2026-07-23.