joomshaper.net

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

joomshaper.net records in CISA KEV

No joomshaper.net vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-36169 CVE-2026-48909 · GHSA-gf8c-xmwj-whrh

Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4

MEDIUM 51

SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.04941 Published 2026-06-20 No fix listed CWE-502

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0