CVE-2026-75953 [HIGH] – Joomla Extension – cmsjunkie.com – Open mail relay in J-BusinessDirectory < 6.2.3 – Recip

Joomla Extension – cmsjunkie.com – Open mail relay in J-BusinessDirectory < 6.2.3 – Recipient address was taken from the request (contact_id_offer / contact_id_event) instead of the server-side offer/event record, so mail could be sent to an arbitrary address.