CVE-2026-48908

A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

Credits

Phil Taylor, mysites.guru
sirmaraz@gmail.com / @mrzblackhat

References