CVE-2026-102426
Received Received - Intake

Reflected XSS in SP Page Builder Pro via Dynamic Content Filter

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: Joomla! Project

Description
Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the delimiter "l-r", HTML-escaped inside the data-value attribute, and then echoed without escaping as the span element's text content. An unauthenticated attacker reflects arbitrary HTML or JavaScript into the rendered page through a crafted dc_filter_<fieldId> value.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-05
Last Modified
2026-10-05
Generated
2026-10-05
AI Q&A
2026-10-05
EPSS Evaluated
N/A
NVD
CVE-2026-102426
EUVD
EUVD-2026-92454

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
joomshaper.com SP Page Builder (Pro) extension for Joomla 3.0.0 - 5.6.1p2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a reflected Cross-Site Scripting (XSS) vulnerability in the Dynamic Content Filter addon of SP Page Builder Pro for Joomla. It occurs when the slider minimum and maximum values are taken from a crafted request parameter, split on a delimiter, HTML-escaped, and then echoed without proper escaping into the page content. This allows an unauthenticated attacker to inject arbitrary HTML or JavaScript into the rendered page.

Detection Guidance

To detect this reflected XSS vulnerability in SP Page Builder Pro, inspect HTTP requests and responses for the dc_filter_<fieldId> parameter. Look for payloads containing HTML/JavaScript in the slider minimum/maximum values. Use browser developer tools to monitor network traffic for suspicious parameters or unexpected script execution.

Impact Analysis

An attacker could exploit this to execute malicious scripts in a victim's browser when they visit a page with the crafted parameter. This could lead to session hijacking, defacement of the website, or theft of sensitive user data like cookies or credentials.

Compliance Impact

This vulnerability could lead to unauthorized access to user data, violating GDPR's data protection principles and HIPAA's security requirements for protected health information. Organizations using the affected software may face compliance breaches, legal penalties, and reputational damage.

Mitigation Strategies

Immediately update SP Page Builder Pro to the latest patched version (5.6.1p3 or higher). If an update is unavailable, disable the Dynamic Content Filter addon or restrict access to the vulnerable parameter via web application firewall rules. Monitor for exploitation attempts in logs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-102426. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart