Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-74254 EUVD-2026-60304GHSA-2r8h-jv53-973m

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5

Published Aug 17, 2026 · Updated Aug 24, 2026 · Assigned by Joomla

Description

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.

Affected products

VendorProductAffectedFixed
joomlack.fr Page Builder CK extension for Joomla 1.0.0-3.6.4 —

References