Critical Vulnerability in JoomShaper SP Page Builder Allows Unrestricted File Uploads

What changed

JoomShaper has identified a significant vulnerability in its SP Page Builder product. This flaw allows unauthenticated users to upload files of dangerous types, including PHP scripts, which can be executed on the server.

The unrestricted file upload capability poses a severe risk, as it can lead to unauthorized access and control over the affected systems.

Who is affected

The vulnerability affects any instance of JoomShaper SP Page Builder that has not been adequately secured against file uploads.

Organizations using this product for website development and management should be particularly vigilant.

• JoomShaper SP Page Builder users
• Web developers utilizing JoomShaper products
• Businesses relying on JoomShaper for content management
• Any organization with publicly accessible instances of SP Page Builder

What to do

It is crucial for affected users to take immediate action to mitigate the risks associated with this vulnerability. Ensure that file upload functionality is restricted to safe file types and implement additional security measures.

Regularly update the SP Page Builder to the latest version provided by JoomShaper, and monitor for any patches or advisories related to this vulnerability.

• Restrict file uploads to safe file types only
• Implement server-side validation for uploaded files
• Regularly update JoomShaper SP Page Builder to the latest version
• Monitor security advisories from JoomShaper for updates