Path Traversal in Joomshaper.com Sp Page Builder Extension For Joomla
CVE-2026-67285
Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.
Vulnerability class: Path Traversal (Directory Traversal)
Affected products
- Joomshaper.com Sp Page Builder Extension For Joomla — versions 1.0.0-6.7.1
Weakness classification (CWE)
References
- security@joomla.org (product)