An authenticated SQL injection vulnerability in JoomShaper SP Page Builder versions 5.2.1 through 6.9.0 allows privileged attackers to extract sensitive database information.

This vulnerability is an authenticated SQL injection flaw within the plgContentSppagebuilder::onContentAfterSave() function. The application improperly concatenates user-supplied input into SQL queries without sanitization, allowing an authenticated attacker to perform time-based blind SQL injection to access sensitive tables like #__users and #__session.

This vulnerability enables an attacker with administrative or privileged access to compromise the integrity and confidentiality of the entire Joomla database. By extracting user credentials and session data, an attacker could escalate privileges or maintain long-term unauthorized access to the site. The CVSS score of 8.6 reflects the high potential for total database compromise.

Immediate Action: Apply the latest vendor-supplied patch for SP Page Builder immediately upon release.

Proactive Monitoring: Enable database query logging and monitor for unusual time-based delays or patterns indicative of blind SQL injection attempts.

Compensating Controls: Restrict administrative access to the Joomla backend to authorized personnel only, and utilize a WAF to filter out suspicious SQL syntax in POST requests.

Public Exploit Available: No

Organizations using SP Page Builder must audit their current version and update to a secure release as soon as it is available. Given the high severity of SQL injection, maintaining strict access control policies is essential to mitigate the risk until the patch is deployed.