Path Traversal in Joomshaper.com Sp Page Builder Extension For Joomla

CVE-2026-65878

Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the media manager.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.003 (25.3th percentile) — read the EPSS interpretation.