Ollyo Sp Page Builder vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Ollyo Sp Page Builder: 2 record(s), with affected versions and fixes.cpe:2.3:a:ollyo:sp_page_builder
CVE-2026-102426
Medium · 6.1
CWE-79 Oct 5, 2026
Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2
Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then echoed without escaping as the span element's text content. An unauthenticated attacker reflects arbitrary HTML or JavaScript into the rendered page through a crafted dc_filter_<fieldId> value.
CVE-2026-48908
Critical · 9.8
KEV Urgent · 73 Public exploit CWE-434 Jun 20, 2026
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.