[Locked] Vulnerability In SP Page Builder 6.7.1
Petra
Good morning,
I just noticed that RS Firewall added protection against vulnerability in SP Page Builder 6.7.1: https://www.rsjoomla.com/support/documentation/rsfirewall-user-guide/changelog/rsfirewall-changelog.html
Do you have any patch for it, please?
Ziaul Kabir
Accepted AnswerHello Petra,
Thanks for reaching out to us.
I reviewed the changelog of RSFirewall, and the entry "Added - Protection against SP Page Builder < 6.7.1 vulnerability" indicates that the security protection has been added for all versions earlier than 6.7.1. It does not mean that there is an issue affecting version 6.7.1.
The security fix is already included in this release, so no separate security patch is required.
Thanks!
copycat
Accepted AnswerYesterday, mysites.guru posted a comment on their Facebook page announcing new vulnerabilities in SP Page Builder, claiming these will be the most critical ones so far. They recommended that the best solution is to delete SP Page Builder entirely and build the website using something else. Of course, he also mentioned that in the coming days there will be more new surprises related to JoomShaper
Paul Frankowski
Accepted AnswerIt was about SPPB 6.7.0 and below, not 6.7.1 read their blog post.
best solution is to delete ...
Joomla, Wordpress, Drupal and make classic HTML site! Let's be serious for a while.
Torsten.S
Accepted AnswerYeah, but we all know, we just scratched the surface.
and as i said: The Pagebuilder code needs a SERIOUS review. Every bit of the code.
https://mysites.guru/blog/sp-page-builder-sql-injection-mail-relay-disclosure/
After reading this, i am more then happy that i got rid of all Pagebuilder components.
Yikes.
copycat
Accepted AnswerI agree, I only shared what was written yesterday afternoon on the Facebook page, and it can still be read now. It referred to the future tense. Not important.