CVE-2026-78083 – Joomla Extension – joomshaper.com – Missing CSRF Token Verification in Property Booking an

Joomla Extension – joomshaper.com – Missing CSRF Token Verification in Property Booking and Agent Contact Endpoints in SP Property < 4.1.4 – The visitor booking (properties.booking) and agent contact form submission (agents.sendmail) endpoints processed POST requests without verifying Joomla session anti-CSRF tokens.