Description
JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| SP Page Builder extension for Joomla | joomshaper.net / SP Page Builder extension for Joomla | 1.0.0-6.6.1 | affected |