Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-77994 EUVD-2026-64750GHSA-mqwq-c23w-58cg

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5

Published Aug 24, 2026 · Updated Aug 25, 2026 · Assigned by Joomla

Description

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.

Affected products

VendorProductAffectedFixed
joomlack.fr Page Builder CK extension for Joomla 1.0.0-3.6.4 —

References