VULNERABILITY INTELLIGENCE
CVE-2026-65766
EPSS probability0.40%
CISA KEVNot currently listed
Published2026-07-27
Last modified2026-10-24
Description
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint leads to an SQL injection vector.
Weakness classification
- security@joomla.org: CWE-89