Veille CVE

Recherche « joomlack.fr Page Builder CK extension for Joomla »

6 CVE

Critique 5 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « joomlack.fr Page Builder CK extension for Joomla » ✕
  1. CVE-2026-77994 9.3 Critique

    joomlack.fr Page Builder CK extension for Joomla

    Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.

  2. CVE-2026-77993 5.3 Moyenne

    joomlack.fr Page Builder CK extension for Joomla

    Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter.

  3. CVE-2026-74254 9.3 Critique

    joomlack.fr Page Builder CK extension for Joomla

    Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.

  4. CVE-2026-63048 9.4 Critique

    joomlack.fr Page Builder CK extension for Joomla

    Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.

  5. CVE-2026-62414 9.1 Critique

    joomlack.fr Page Builder CK extension for Joomla

    Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.

  6. CVE-2026-56290 9.8 Critique Exploitée

    JoomlaCK.fr Page Builder CK extension for Joomla · Joomlack page builder ck

    Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.