CVE-2026-65877

The SP Page Builder extension for Joomla versions prior to 6.7.1 is vulnerable to an authenticated SQL injection due to inadequate validation of parameters in the media manager's search and date filters. This flaw could allow authenticated users to execute arbitrary SQL queries, potentially compromising the integrity and confidentiality of the database. Joomla administrators and developers using this extension should prioritize patching to mitigate the risk of exploitation.