J2Store Reflected Cross-Site Scripting via URL Redirection

Executive Summary

This vulnerability is a Reflected Cross-Site Scripting (XSS) flaw in the J2Store Joomla extension versions 1.0.0-3.3.21, 4.0.0-4.0.21, and 4.1.0-4.1.6. It allows attackers to inject malicious scripts via parameters like filter_tag, pricefrom, and priceto. The issue occurs because four task handlers accept base64-encoded URLs from user input and redirect to them without validating the destination host, enabling phishing attacks using the shop's trusted domain.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow attackers to trick users into clicking malicious links that appear to come from a trusted J2Store shop. It could lead to theft of session cookies, login credentials, or other sensitive data. Users might unknowingly execute malicious scripts, compromising their accounts or personal information.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to data breaches, which may violate GDPR's data protection requirements if personal data is exposed. For HIPAA, if the Joomla store handles protected health information, a breach could result in non-compliance with security standards. Both regulations require protection against unauthorized data access and breaches.

Useful 0 Not Useful 0

Mitigation Strategies

Update J2Store to the latest patched version immediately to address the reflected XSS vulnerability in filter_tag, pricefrom, and priceto parameters. Disable or restrict access to vulnerable task handlers until updates are applied. Monitor network traffic for suspicious redirects or phishing attempts using the shop's domain.

Useful 0 Not Useful 0