Skip to content
OpenAdvisories
Medium · 6.3 CVE-2026-67287 EUVD-2026-57217GHSA-43q2-pmmj-8ph8

Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0

Published Aug 12, 2026 · Updated Aug 14, 2026 · Assigned by Joomla

Description

Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input.

Affected products

VendorProductAffectedFixed
joomshaper.com SP Page Builder extension for Joomla 1.0.0-6.7.1 —

References