CVE-2026-65766

Description

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.7.1 - Improper validation of order parameters in the Dynamic Content endpoint leads to an SQL injection vector.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-65766 ↗
• mysites.guru/blog/sp-page-builder-sql-injection-mail-relay-disclosure/ ↗
• www.joomshaper.com/page-builder ↗

Related CVEs

• CVE-2026-59527RomanCode / MapSVGCVSS 9.3
• CVE-2026-65879joomshaper.com / SP Page Builder extension for JoomlaCVSS 9.8
• CVE-2026-65876joomshaper.com / SP Page Builder extension for JoomlaCVSS 9.2
• CVE-2026-55971Apache Software Foundation / Apache ThriftCVSS 9.3
• CVE-2026-48144Apache Software Foundation / Apache ThriftCVSS 9.1
• CVE-2026-66012siyuan-note / siyuanCVSS 10.0
• CVE-2026-65761joomshaper.com / Easy Store extension for JoomlaCVSS 9.3
• CVE-2026-65760joomshaper.com / Easy Store extension for JoomlaCVSS 9.2