CVE-2026-102426

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-10-05

Last updated on: 2026-10-14

Assigner: Joomla! Project

Description

Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then echoed without escaping as the span element's text content. An unauthenticated attacker reflects arbitrary HTML or JavaScript into the rendered page through a crafted dc_filter_<fieldId> value.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-05

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-05

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102426

EUVD

EUVD-2026-92454

Affected Vendors & Products

Vendor	Product	Version / Range
ollyo	sp_page_builder	From 3.0.0 (inc) to 5.6.1 (exc)
ollyo	sp_page_builder	5.6.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

This is a reflected Cross-Site Scripting (XSS) vulnerability in the Dynamic Content Filter addon of SP Page Builder Pro for Joomla. It occurs when the slider minimum and maximum values are taken from a crafted request parameter, split on a delimiter, HTML-escaped, and then echoed without proper escaping into the page content. This allows an unauthenticated attacker to inject arbitrary HTML or JavaScript into the rendered page.

Detection Guidance

To detect this reflected XSS vulnerability in SP Page Builder Pro, inspect HTTP requests and responses for the dc_filter_<fieldId> parameter. Look for payloads containing HTML/JavaScript in the slider minimum/maximum values. Use browser developer tools to monitor network traffic for suspicious parameters or unexpected script execution.

Impact Analysis

An attacker could exploit this to execute malicious scripts in a victim's browser when they visit a page with the crafted parameter. This could lead to session hijacking, defacement of the website, or theft of sensitive user data like cookies or credentials.

Compliance Impact

This vulnerability could lead to unauthorized access to user data, violating GDPR's data protection principles and HIPAA's security requirements for protected health information. Organizations using the affected software may face compliance breaches, legal penalties, and reputational damage.

Mitigation Strategies

Immediately update SP Page Builder Pro to the latest patched version (5.6.1p3 or higher). If an update is unavailable, disable the Dynamic Content Filter addon or restrict access to the vulnerable parameter via web application firewall rules. Monitor for exploitation attempts in logs.

Hi! I’m here to help you understand CVE-2026-102426. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70