PT-2026-51135 · Joomshaper.Net · Sp Page Builder Extension For Joomla

Phil Taylor · Published 2026-06-20 · Updated 2026-06-20 · CVE-2026-48908

Mitre

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red

A vulnerability in the SP Page Builder for Joomla allows the upload of arbitrary files for unauthenticated users, ultimately resulting in PHP code upload and execution.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-48908

Affected Products

Sp Page Builder Extension For Joomla

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-48908 · Security Note
• https://joomshaper.com/page-builder · Note