CVE-2026-67287:詳細資料

CVE-2026-67287

2026-08-12
15h18 +00:00
A01-Broken Access Control
2026-10-23
23h10 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user supplied input.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-284 Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

參考資料