CVE Intelligence

Joomshaper.net SP LMS extension for Joomla vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Joomshaper.net SP LMS extension for Joomla: 1 record(s), with affected versions and fixes.

CVE-2026-48909 Critical · 9.5 Public exploit CWE-502 Jun 20, 2026
JoomShaper SP LMS (com_splms) Joomla Component Insecure Deserialization of Cookie Data
SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server.