All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-67287
MEDIUMpublished 2026-08-12 15:18 UTC · 12 hours ago
6.3
CVSS / 10
// description
Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input.
// weaknesses (CWE)
- CWE-284