CyberRota Analysis
AI-GeneratedThe J2Store extension for Joomla is vulnerable to order content disclosure, allowing unauthenticated users to access sensitive order details by manipulating the order_id query parameter. This flaw could lead to the exposure of confidential information, including line items and pricing, potentially impacting customer privacy and trust. Joomla site administrators using affected versions should prioritize patching this vulnerability to safeguard their users' data.
Original NVD Description
Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An unauthenticated visitor could supply any order_id as a query parameter to render the full checkout confirmation page for that order, including line items, prices, and totals.