A critical unauthenticated SQL injection vulnerability in the JoomShaper SP Page Builder extension allows remote attackers to perform unauthorized database operations.

This is an SQL injection vulnerability located in the loadMoreArticles endpoint. An unauthenticated attacker can supply malicious input to the catid parameter to execute arbitrary SQL commands against the backend database.

Successful exploitation allows an attacker to bypass standard access controls, potentially leading to full database exposure. With a CVSS score of 9.2, this vulnerability represents a significant risk to the security of the Joomla environment and the sensitive data contained within the associated database.

Immediate Action: Update the SP Page Builder extension to version 6.7.1 or later immediately.

Proactive Monitoring: Monitor database logs for unusual query activity, particularly those involving the loadMoreArticles function or unexpected SQL syntax characters.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter incoming requests for SQL injection payloads targeting the Joomla extension.

Public Exploit Available: No

The severity of this vulnerability necessitates an immediate update to the latest patched version of the SP Page Builder extension. Administrators should treat this as a high priority task to prevent potential data breaches.