Veille CVE

Recherche « Ollyo sp page builder »

2 CVE

Critique 1 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Ollyo sp page builder » ✕
  1. CVE-2026-102426 6.1 Moyenne

    joomshaper.com SP Page Builder (Pro) extension for Joomla · Ollyo sp page builder

    Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then echoed without escaping as the span element's text content. An unauthenticated attacker reflects arbitrary HTML or JavaScript into the rendered page through a crafted dc_filter_<fieldId> value.

  2. CVE-2026-48908 9.8 Critique Exploitée

    joomshaper.net SP Page Builder extension for Joomla · Ollyo sp page builder

    A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.