VYPR

SP Page Builder

by Joomshaper.com

CVEs (1)

  • CVE-2026-66494HigAug 7, 2026
    risk 0.57cvss epss 0.00

    Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0 - An unauthenticated attacker can store malicious JavaScript in a Joomla site's database via a single HTTP request. When an administrator opens the SP Page Builder…