← CVE Intelligence

CVE-2026-102426

Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 PUBLISHED

Description (CNA)

Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then echoed without escaping as the span element's text content. An unauthenticated attacker reflects arbitrary HTML or JavaScript into the rendered page through a crafted dc_filter_<fieldId> value.

Affected (CNA)

Vendor / productVersions
joomshaper.com / SP Page Builder (Pro) extension for Joomlaaffected 3.0.0 - 5.6.1p2

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.