Description
Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 - Improper validation of catid parameters in the loadMoreArticles endpoint leads to an SQL injection vector.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| joomshaper.com | SP Page Builder extension for Joomla | 1.0.0-6.7.1 | — |