Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-102426— Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2

Quick assessment

Affected
joomshaper.com SP Page Builder (Pro) extension for Joomla
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Joomla 扩展 - joomshaper.com - SP Page Builder Pro 3.0.0 至 5.6.1p2 版本中 Dynamic Content Filter 插件存在反射型跨站脚本漏洞（XSS） 在该漏洞中，滑块的最小值和最大值取自 请求参数，该参数以分隔符“l-r”进行拆分，并在 属性中被进行 HTML 转义处理；但随后，该值被未转义地直接输出为 元素的文本内容。未经身份验证的攻击者可以通过构造恶意 参数值，将任意 HTML 或 JavaScript 代码反射并注入到页面渲染结果中，从而

CVSS 5.3 · Medium

Affected Version Matrix 1

VendorProduct Version RangeStatus
joomshaper.com SP Page Builder (Pro) extension for Joomla 3.0.0 - 5.6.1p2 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-102426

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2
Source: CVE Program / CVE List V5
Vulnerability Description
Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then echoed without escaping as the span element's text content. An unauthenticated attacker reflects arbitrary HTML or JavaScript into the rendered page through a crafted dc_filter_<fieldId> value.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
joomshaper.com SP Page Builder (Pro) extension for Joomla 3.0.0 - 5.6.1p2 -

II. Public POCs for CVE-2026-102426

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-102426

请登录查看更多情报信息。

Vendor Pages for CVE-2026-102426 (1)

IV. Related Vulnerabilities

Same product: SP Page Builder (Pro) extension for Joomla
Same vendor: joomshaper.com
Same weakness: CWE-79

V. Comments for CVE-2026-102426

No comments yet

Leave a comment