The SP Page Builder Pro extension for Joomla has a security flaw that could allow attackers to inject malicious code into websites. This issue, identified as CVE-2026-102426, is a type of Reflected Cross-Site Scripting (XSS) vulnerability. It could affect websites using specific versions of the popular page builder.<\/p>\n
This vulnerability affects SP Page Builder Pro<\/strong>, a popular Joomla extension by joomshaper.com. It was published on October 5, 2026, and is currently under analysis. The Common Vulnerability Scoring System (CVSS) rates this as a Medium severity issue with a score of 6.1.<\/p>\n Websites running SP Page Builder Pro versions 3.0.0 through 5.6.1p2<\/strong> for Joomla are affected. If your website uses any of these versions, it is susceptible to this vulnerability.<\/p>\n The status of CVE-2026-102426 is “Analyzed.” This means the vulnerability has been publicly disclosed and its details are known and understood by security researchers and vendors.<\/p>\n This Reflected XSS vulnerability has a Medium severity rating. A Medium severity rating means that while an exploit is possible, it might require specific conditions or user interaction. If exploited, an attacker could inject malicious scripts into web pages. These scripts might steal user information (like session cookies), deface websites, redirect users to malicious sites, or perform actions on behalf of the victim. For more information on this type of attack, you might want to read our article on Understanding Cross-Site Scripting (XSS) Attacks.<\/p>\n To protect your Joomla website, it is crucial to update your SP Page Builder Pro extension. We strongly recommend upgrading to the latest available stable version of SP Page Builder Pro immediately. Developers often release patches to address such security flaws. Always ensure your software, including all extensions and themes, is kept up-to-date. Additionally, following general Joomla Security Best Practices can help prevent a wide range of attacks. Regular backups are also essential for quick recovery in case of any security incident.<\/p>\n https:\/\/www.joomshaper.com\/joomla-extensions\/sp-page-builder-pro<\/p>\n","protected":false},"excerpt":{"rendered":" The SP Page Builder Pro extension for Joomla has a security flaw that could allow attackers to inject malicious code into websites. This issue, identified as CVE-2026-102426, is<\/p>\n","protected":false},"author":17,"featured_media":2649,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[980,1306,696,695,692],"class_list":["post-4216","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-joomla","tag-sp-page-builder-pro","tag-vulnerability","tag-web-security","tag-xss"],"yoast_head":"\nAffected Products<\/h2>\n
Current Status<\/h2>\n
Severity Level<\/h2>\n
Possible Solutions<\/h2>\n
References<\/h2>\n