CVE-2026-61901

The Hikashop Joomla extension versions prior to 6.5.2 are susceptible to an open redirect vulnerability, allowing attackers to manipulate URLs and redirect users to malicious sites. This could lead to phishing attacks or the distribution of malware, posing a risk to users who rely on this extension for e-commerce functionality. Joomla administrators and web developers using Hikashop should prioritize applying the latest updates to mitigate this risk.