CVE-2026-63264

The JoomShopping extension for Joomla versions prior to 5.9.3 is susceptible to a reflected cross-site scripting (XSS) vulnerability in its product frontend controller, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to session hijacking, data theft, or other malicious actions executed in the context of the affected user. Joomla site administrators using JoomShopping should prioritize updating to version 5.9.3 or later to mitigate this risk.