CVE-2026-65876

Description

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 - Improper validation of catid parameters in the loadMoreArticles endpoint leads to an SQL injection vector.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-65876 ↗
• www.joomshaper.com/page-builder ↗

Related CVEs

• CVE-2026-59533Christoph Vielgrader / Relevanssi LightCVSS 9.3
• CVE-2026-59527RomanCode / MapSVGCVSS 9.3
• CVE-2026-65879joomshaper.com / SP Page Builder extension for JoomlaCVSS 9.8
• CVE-2026-65766joomshaper.com / SP Page Builder extension for JoomlaCVSS 9.2
• CVE-2026-55971Apache Software Foundation / Apache ThriftCVSS 9.3
• CVE-2026-48144Apache Software Foundation / Apache ThriftCVSS 9.1
• CVE-2026-65761joomshaper.com / Easy Store extension for JoomlaCVSS 9.3
• CVE-2026-65760joomshaper.com / Easy Store extension for JoomlaCVSS 9.2