← CVE Intelligence

CVE-2026-48908

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2 PUBLISHED

Description (CNA)

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

Affected (CNA)

Vendor / productVersions
joomshaper.net / SP Page Builder extension for Joomlaaffected 1.0.0-6.6.1

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.