Security Advisory

CVE-2026-65878

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-27 12:54:54
Last updated 2026-08-12 13:52:46
Assigner Joomla
CVSS score 8.3
State PUBLISHED

Description

Joomla Extension - joomshaper.com - Authenticated arbitrary file delete in SP Page Builder < 6.7.1- Improper path validation and ACL checks lead to a file deletion vector in the media manager.