Medium · 5.3 CVE-2026-77993 EUVD-2026-64751GHSA-vrrp-8526-8v58

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5

Published Aug 24, 2026 · Updated Aug 25, 2026 · Assigned by Joomla

Vendor: joomlack.fr Product: Page Builder CK extension for Joomla Category: Web / CMS

Description

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter.

Affected products

Vendor	Product	Affected	Fixed
joomlack.fr	Page Builder CK extension for Joomla	1.0.0-3.6.4	—

References

https://www.joomlack.fr/ product