CVE-2026-65877

UNKNOWN 0.0

Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Joomla Extension - joomshaper.com - Authenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of various parameters in the media manager search and date filters lead to an SQL injection vector.

CWE	CWE-89
Vendor	joomshaper.com
Product	sp page builder extension for joomla
Published	Jul 27, 2026

Stay Ahead of the Next One

Get instant alerts for joomshaper.com sp page builder extension for joomla

Be the first to know when new unknown vulnerabilities affecting joomshaper.com sp page builder extension for joomla are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

joomshaper.com / SP Page Builder extension for Joomla

1.0.0-6.7.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

joomshaper.com: https://www.joomshaper.com/page-builder mysites.guru: https://mysites.guru/blog/sp-page-builder-sql-injection-mail-relay-disclosure/

Credits

Phil Taylor