{"id":"CVE-2026-102426","title":"Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the d…","summary":"Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the d…","severity":"medium","cvss":6.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cwe":["CWE-79"],"vendor":"ollyo","product":"sp_page_builder","affected":["sp_page_builder >= 3.0.0, < 5.6.1","sp_page_builder = 5.6.1"],"patched":["sp_page_builder 5.6.1"],"published":"2026-10-05","updated":"2026-10-14","sourceUpdated":"2026-10-14T18:53:32.297","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-102426","references":[{"url":"https://www.joomshaper.com/joomla-extensions/sp-page-builder-pro","label":"security@joomla.org"}],"tags":["nvd","cve.org"],"epss":0.00162,"epssPercentile":0.05343,"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-05T16:27:41.657589Z"},"scores":{"nvd":6.1,"cna":5.3},"ingestedAt":"2026-10-05T16:25:58.408Z","slug":"CVE-2026-102426","body":"## Overview\n\nJoomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the delimiter \"l-r\", HTML-escaped inside the data-value attribute, and then echoed without escaping as the span element's text content. An unauthenticated attacker reflects arbitrary HTML or JavaScript into the rendered page through a crafted dc_filter_<fieldId> value.\n\n## Affected\n\n- `sp_page_builder >= 3.0.0, < 5.6.1`\n- `sp_page_builder = 5.6.1`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `sp_page_builder 5.6.1`","depth":"sunlit","depthScore":34,"depthScoreParts":{"impact":33.6,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":220402,"id":"CVE-2026-102426","ts":1792007491344,"field":"cvss","old":"5.3","new":"6.1"}]}