NetSight
critical9.2

CVE-2026-65876

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 - Improper validation of catid parameters in the loadMoreArticles …

Impact

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 - Improper validation of catid parameters in the loadMoreArticles endpoint leads to an SQL injection vector.

Affected products

ProductAffected versions
SP Page Builder
before 6.8.0

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References