Description
A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.
Published: 2026-06-20
Score: 10 Critical
EPSS: 88.1% High
KEV: Yes
Impact: n/a
Action: n/a
AI Analysis

Impact

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, which the application then executes as PHP. The description specifically notes that arbitrary files can be uploaded and run as PHP, implying that the upload endpoint lacks file type restrictions or proper authentication checks.

Affected Systems

The SP Page Builder extension for Joomla from joomshaper.net is vulnerable. No specific version information is provided; therefore all releases of the extension could be impacted.

Risk and Exploitability

The CVSS score of 10 indicates an extremely severe flaw. The EPSS score of 88% indicates a very high likelihood of exploitation. Because the flaw allows unauthenticated uploads with no file type checks, the attack path appears straightforward: an attacker can send a crafted request to the extension's upload endpoint, place a PHP file in the upload directory, and have it executed. The vulnerability is listed in CISA KEV.

Generated by OpenCVE AI on July 28, 2026 at 12:20 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to the most recent SP Page Builder release that resolves the upload validation vulnerability.
  • Restrict upload functionality access so that only authenticated administrators can use it.
  • Configure the web server to deny execution of files uploaded via the extension, for example by adding .htaccess rules or server directives that block PHP execution in the upload directories.

Generated by OpenCVE AI on July 28, 2026 at 12:20 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 07 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 07 Jul 2026 17:45:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2026-07-07T00:00:00+00:00', 'dueDate': '2026-07-10T00:00:00+00:00'}

Sun, 05 Jul 2026 14:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284 CWE-434

Wed, 24 Jun 2026 19:30:00 +0000

Type Values Removed Values Added
References

Mon, 22 Jun 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Sun, 21 Jun 2026 15:00:00 +0000

Type Values Removed Values Added
Description A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultimately resulting in PHP code upload and execution. A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.
Title Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.12 Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

Sun, 21 Jun 2026 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Joomshaper.net
Joomshaper.net sp Page Builder Extension For Joomla
Vendors & Products Joomshaper.net
Joomshaper.net sp Page Builder Extension For Joomla

Sat, 20 Jun 2026 12:45:00 +0000

Type Values Removed Values Added
Description A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultimately resulting in PHP code upload and execution.
Title Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.12
Weaknesses CWE-284
References
Metrics cvssV4_0

{'score': 10, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red'}

Subscriptions

Joomshaper.net Sp Page Builder Extension For Joomla
cve-icon MITRE

Status: PUBLISHED

Assigner: Joomla

Published:

Updated: 2026-07-15T07:48:44.797Z

Reserved: 2026-05-26T10:06:17.657Z

Link: CVE-2026-48908

cve-icon Vulnrichment

Updated: 2026-06-22T17:30:43.084Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-28T12:30:16Z

Weaknesses
  • CWE-434

    Unrestricted Upload of File with Dangerous Type