CVE-2026-63264: Joomshopping.com Joomshopping Extension For Joomla

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3 - The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller.

Affected products

• Joomshopping.com Joomshopping Extension For Joomla: version 1.0.0-5.9.2 only

Published 2026-07-22. Last modified 2026-07-23.