{"id":"CVE-2026-102426","title":"Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the d…","summary":"Joomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the d…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","cwe":["CWE-79"],"vendor":"joomshaper.com","product":"SP Page Builder (Pro) extension for Joomla","affected":["sp_page_builder_pro_extension_for_joomla 3.0.0 - 5.6.1p2"],"published":"2026-10-05","updated":"2026-10-05","sourceUpdated":"2026-10-05T17:17:09.277","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-102426","references":[{"url":"https://www.joomshaper.com/joomla-extensions/sp-page-builder-pro","label":"security@joomla.org"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-05T16:27:41.657589Z"},"cvssSource":"cna","ingestedAt":"2026-10-05T16:25:58.408Z","slug":"CVE-2026-102426","body":"## Overview\n\nJoomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and maximum values are taken from the dc_filter_<fieldId> request parameter, split on the delimiter \"l-r\", HTML-escaped inside the data-value attribute, and then echoed without escaping as the span element's text content. An unauthenticated attacker reflects arbitrary HTML or JavaScript into the rendered page through a crafted dc_filter_<fieldId> value.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}