CVE-2026-48908

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

CritiqueCWE-434 Toutes les CVE

Faiblesse

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

Produits concernés

ollyo sp_page_builder

Références

https://www.joomshaper.com/page-builder
https://extensions.joomla.org/extension/sp-page-builder/
https://mysites.guru/blog/sp-page-builder-zero-day-uploadcustomicon-rce/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48908
https://www.joomshaper.com/forum/question/45152

Trouvez la faille avant un attaquant.

Connectez-vous avec GitHub et lancez votre premier audit en moins d'une minute. L'offre gratuite ne nécessite aucune carte bancaire.

Lancer un audit gratuit Voir les tarifs