Threat intelligence / Vulnerability
CVE-2026-48908
JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.
Vulnerability
TypeVulnerability
External ID—
First seen2026-07-07
Last seen2026-07-07
Confidence
—
JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.
Labels
CISA KEV context
Vendor / productJoomShaper SP Page Builder
Added2026-07-07
Due date2026-07-10
2 recorded
Relationships
2 external