← Database

CVE-2026-48908

CRITICAL CVSS: 9.8 Published: 2026-06-20 Modified: 2026-07-08

Description

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

Affected Platforms

Ollyo Sp Page Builder

Weakness Type

CWE-434, CWE-434

References