Hi SP Page Builder Support Team,

I am writing to report an unhandled PHP exception that my security tool (Admin Tools) recently caught on my website.

While I believe this was triggered by an automated bot scanning for vulnerabilities, the component is throwing a 500 PHP Exception with a full stack trace instead of gracefully returning a 404 (Not Found) or 403 (Forbidden) error. Catching invalid tasks would prevent server path disclosure and reduce unnecessary error log spam.

Environment details:

Joomla! Version: 6.1.2

SP Page Builder Version: 6.6.2

The Issue: A GET request was made to the following URL: /?option=com_sppagebuilder&task=icon.upload

This resulted in the following Exception: Message: Invalid Controller: name='icon', format='' Type: InvalidArgumentException File: /libraries/src/MVC/Controller/BaseController.php

Could you please pass this to the development team so they can add a proper catch/validation for invalid tasks in the component's routing?

Thank you for your time and for the great work on the component.