CVE-2026-78375

Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0 - plgContentSppagebuilder::onContentAfterSave() read jform[attribs][sppagebuilder_article_id] from the request and concatenated it directly into the WHERE view_id = ... clause of a query against #__sppagebuilder without quoting or type casting. Joomla's ARRAY input filter does not sanitise element values, as InputFilter::clean() returns (array) $source with the elements untouched, so the entire payload could be delivered in a single POST field. The affected block also executed before the com_content.article context test, so it ran on every onContentAfterSave event regardless of which component triggered the save. An attacker could perform time-based blind SQL injection to read arbitrary database contents, including the #__users and #__session tables.

• CWE-89

• https://www.joomshaper.com/joomla-extensions/sp-page-builder-pro

Published

Sep 14, 2026

Last Modified

Sep 16, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-78367A vulnerability was found in RPM's rpmbuild tarball processi…7
• CVE-2026-78369RansomLook contains a missing authentication vulnerability i…8.8
• CVE-2026-7837A time-of-check time-of-use (TOCTOU) condition in the ad_flu…3.7
• CVE-2026-78370RansomLook contains an authorization flaw in its legacy data…9.2
• CVE-2026-78372RansomLook does not consistently enforce authorization chec…9.2
• CVE-2026-78374Joomla Extension - joomlart.com - Open mail relay via contac…6.9
• CVE-2026-78376A flaw was found in WebKitGTK. Processing malicious web cont…8.8
• CVE-2026-78377URL redirection to untrusted site ('open redirect') vulnerab…6.1
• CVE-2026-78378Ransomlook contains a Redis glob pattern injection vulnerabi…6.9
• CVE-2026-78379Improper neutralization of input used for LLM prompting in t…8.1
• CVE-2026-7838UltraVNC viewer through 1.8.2.2 contains an integer overflow…8.8
• CVE-2026-78380RansomLook fails to enforce the privacy status of ransomware…8.7