CVE-2026-67287Disclosure

LOWCVSS 6.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://www.joomshaper.com/page-builder

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-67287

Full discourse1 post

mürrez@murrezsec46d
Disclosure
Joomla Extension - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input. https://www.cve.org/CVERecord?id=CVE-2026-67287 https://t.co/ePa7ce9see
Post summary
A new unauthenticated comment‑creation vulnerability (CVE‑2026‑67287) in SP Page Builder < 6.8.0 is disclosed, enabling attackers to override disabled guest commenting via user input.
0001049
601 followersView on X

Explore more

Back to dashboard