CVE-2026-67287CWE-284broken-access-control

CVE-2026-67287

published August 12, 2026

CVSS

6.3

EPSS

Percentile

35.1

In the wild

Unconfirmed

What it is

Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input.

The record

Technical detail

CVSS: 6.3 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00419 · 35.1th percentile
Weakness: CWE-284 · Improper Access Control
Published: 2026-08-12T19:18Z

References (1)

https://www.joomshaper.com/page-builder · [email protected]

EPSS history

Timeline

12 AUG 13:59Z
Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0
cvelistv5