High severityNVD Advisory· Published Sep 10, 2026· Updated Sep 10, 2026
CVE-2026-78083
CVE-2026-78083
Description
Joomla Extension - joomshaper.com - Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 - The visitor booking (properties.booking) and agent contact form submission (agents.sendmail) endpoints processed POST requests without verifying Joomla session anti-CSRF tokens.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <4.1.4
- Range: <4.1.4
Patches
Vulnerability mechanics
References
1News mentions
1- Joomla Extensions SP Property & T4 Page Builder: Six Vulnerabilities Disclosed TogetherVypr Intelligence · Sep 10, 2026