CVE-2026-66494 | Joomshaper SP Page Builder Extension up to 6.6.2 Shapes API Endpoint cross site scripting

A vulnerability, which was classified as problematic, was found in Joomshaper SP Page Builder Extension up to 6.6.2. This affects an unknown part of the component Shapes API Endpoint. Executing a manipulation can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-66494. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More