Sp Page Builder Pro Extension For Joomla
Monthly
Reflected cross-site scripting (XSS) in the Dynamic Content Filter addon of the SP Page Builder Pro extension for Joomla (versions 3.0.0 through 5.6.1p2) allows unauthenticated attackers to inject arbitrary HTML or JavaScript into a victim's browser by crafting a URL with a malicious dc_filter_<fieldId> parameter, provided the addon is used with a slider field. The flaw is rated medium severity (CVSS 4.0 base 5.3; independent assessment CVSS 3.1 base 5.3) and requires user interaction-the victim must load the crafted link. No public exploit code has been identified at time of analysis, and CISA KEV does not list active exploitation.
CAPTCHA verification in SP Page Builder Pro's Contact, Opt-in, and Form Builder addons can be defeated on any Joomla site running versions 3.2.6 through 6.9.0 by submitting the parameter view_type=module alongside any non-empty token string. The addon silently discards the CAPTCHA plugin's actual onCheckAnswer verification result and substitutes a trivially-satisfied non-empty-string check whenever this attacker-controlled parameter is present, rendering all configured CAPTCHA types ineffective for forms placed inside SP Page Builder modules. No public exploit has been identified at time of analysis, but the bypass is trivially automatable per SSVC assessment, requiring only a single parameter change in a standard form POST.
Reflected cross-site scripting (XSS) in the Dynamic Content Filter addon of the SP Page Builder Pro extension for Joomla (versions 3.0.0 through 5.6.1p2) allows unauthenticated attackers to inject arbitrary HTML or JavaScript into a victim's browser by crafting a URL with a malicious dc_filter_<fieldId> parameter, provided the addon is used with a slider field. The flaw is rated medium severity (CVSS 4.0 base 5.3; independent assessment CVSS 3.1 base 5.3) and requires user interaction-the victim must load the crafted link. No public exploit code has been identified at time of analysis, and CISA KEV does not list active exploitation.
CAPTCHA verification in SP Page Builder Pro's Contact, Opt-in, and Form Builder addons can be defeated on any Joomla site running versions 3.2.6 through 6.9.0 by submitting the parameter view_type=module alongside any non-empty token string. The addon silently discards the CAPTCHA plugin's actual onCheckAnswer verification result and substitutes a trivially-satisfied non-empty-string check whenever this attacker-controlled parameter is present, rendering all configured CAPTCHA types ineffective for forms placed inside SP Page Builder modules. No public exploit has been identified at time of analysis, but the bypass is trivially automatable per SSVC assessment, requiring only a single parameter change in a standard form POST.