Joomlack.fr vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Joomlack.fr products: 5 record(s), with severity, exploitation and fixes.

JoomlaCK.fr Page Builder CK extension for Joomla 5

Exploited only (KEV) →

CVE-2026-77994 Critical · 9.3 CWE-89 Aug 24, 2026

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.

CVE-2026-77993 Medium · 5.3 CWE-79 Aug 24, 2026

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter.

CVE-2026-63048 Critical · 9.4 CWE-434 Jul 22, 2026

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.

CVE-2026-62414 Critical · 9.1 CWE-284 Jul 20, 2026

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.

CVE-2026-56290 Critical · 9.8 KEV Urgent · 81 Public exploit CWE-434 Jun 29, 2026

Joomlack Page Builder Improper Access Control Vulnerability

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.