VULNERABILITY INTELLIGENCE
CVE-2026-67287
EPSS probability0.42%
CISA KEVNot currently listed
Published2026-08-12
Last modified2026-10-23
Description
Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input.
Weakness classification
- security@joomla.org: CWE-284