Security Advisory

CVE-2026-65878

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-27 12:54:54
Last updated 2026-07-28 05:31:08
Assigner Joomla
CVSS score not scored
State PUBLISHED

Description

Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the media manager.