https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-5182.htmlhttps://patchthecve.com/cve/CVE-2020-5182.htmlWed, 17 Jun 2026 03:20:59 +0000MEDIUM 6.5: The J-BusinessDirectory extension before 5.2.9 for Joomla! allows Reverse Tabnabbing. In some configurations, the link to the business website can be entered by any user. If it doesn't contain rel="noopener" (or similar attributes such as noreferrer), the tabnabbing may occur. To reproduce the bug, https://patchthecve.com/cve/CVE-2015-1478.htmlhttps://patchthecve.com/cve/CVE-2015-1478.htmlWed, 17 Jun 2026 00:22:29 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the view parameter to /classifieds.https://patchthecve.com/cve/CVE-2015-1477.htmlhttps://patchthecve.com/cve/CVE-2015-1477.htmlWed, 17 Jun 2026 00:22:29 +0000HIGH 7.5: SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewad task to classifieds/offerring-ads.