cbcvebase.

Joomshaper.Net Sp Lms Extension For Joomla vulnerabilities

1 known vulnerability affecting joomshaper.net/sp_lms_extension_for_joomla.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-48909P2CRITICALCVSS 9.5v1.0.0-4.1.32026-06-20
CVE-2026-48909 [CRITICAL] CWE-502 CVE-2026-48909: SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server.
nvd
Joomshaper.Net Sp Lms Extension For Joomla vulnerabilities | cvebase