Good morning,
I just noticed that RS Firewall added protection against vulnerability in SP Page Builder 6.7.1:
https://www.rsjoomla.com/support/documentation/rsfirewall-user-guide/changelog/rsfirewall-changelog.html
Do you have any patch for it, please?
Hello Petra,
Thanks for reaching out to us.
I reviewed the changelog of RSFirewall, and the entry "Added - Protection against SP Page Builder < 6.7.1 vulnerability" indicates that the security protection has been added for all versions earlier than 6.7.1. It does not mean that there is an issue affecting version 6.7.1.
The security fix is already included in this release, so no separate security patch is required.
Thanks!
Yesterday, mysites.guru posted a comment on their Facebook page announcing new vulnerabilities in SP Page Builder, claiming these will be the most critical ones so far. They recommended that the best solution is to delete SP Page Builder entirely and build the website using something else.
Of course, he also mentioned that in the coming days there will be more new surprises related to JoomShaper
It was about SPPB 6.7.0 and below, not 6.7.1 read their blog post.
best solution is to delete ...
Joomla, Wordpress, Drupal and make classic HTML site! Let's be serious for a while.
Yeah, but we all know, we just scratched the surface.
and as i said: The Pagebuilder code needs a SERIOUS review. Every bit of the code.
https://mysites.guru/blog/sp-page-builder-sql-injection-mail-relay-disclosure/
After reading this, i am more then happy that i got rid of all Pagebuilder components.
Yikes.
I agree, I only shared what was written yesterday afternoon on the Facebook page, and it can still be read now. It referred to the future tense. Not important.
15hours ago on FB mysites was info about Joomla 3 sites with SP Page Builder or Helix on them.
It's not for webmaters who have SPPB 6.7.x and Joomla 5-6. Those can sleep well.
