Question 1

What is CVE-2026-48908 — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability?

Accepted Answer

JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code.

Question 2

What is the authoritative source for CVE-2026-48908?

Accepted Answer

JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2026-48908) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVSS	9.8 ()
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	88.13% probability of exploitation · percentile 99.8% · 2026-07-28T12:00:27Z
Last modified	2026-07-08

CVE-2026-48908JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability

Description

Scoring

CISA KEV entry