Path Traversal in Joomshaper.com Sp Page Builder Extension For Joomla
CVE-2026-67286
Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name.
Vulnerability class: Path Traversal (Directory Traversal)
Affected products
- Joomshaper.com Sp Page Builder Extension For Joomla — versions 1.0.0-6.7.1
Weakness classification (CWE)
References
- security@joomla.org (product)