VULNERABILITY INTELLIGENCE
CVE-2026-65876
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-07-27
Last modified2026-10-24
Description
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 - Improper validation of catid parameters in the loadMoreArticles endpoint leads to an SQL injection vector.
Weakness classification
- security@joomla.org: CWE-89