| Summary | SP LMS (com_splms) < 4.1.4 by JoomShaper deserializes user-controlled cookie data without validation, enabling an unauthenticated remote attacker to execute arbitrary code on the server. |
|---|---|
| Publication Date | June 20, 2026, 10:16 p.m. |
| Registration Date | June 27, 2026, 4:07 a.m. |
| Last Update | June 23, 2026, 5:21 a.m. |