Read the docs

joomlack.fr

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

joomlack.fr records in CISA KEV

No joomlack.fr vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-54269 CVE-2026-77994 · GHSA-mqwq-c23w-58cg

SQL injection in joomlack.fr Page Builder CK extension for Joomla

Priority MEDIUM 48

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page m…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00386 Published 2026-08-24 No fix listed CWE-89
TI-2026-52039 CVE-2026-74254 · GHSA-2r8h-jv53-973m

SQL injection in joomlack.fr Page Builder CK extension for Joomla

Priority MEDIUM 48

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00386 Published 2026-08-17 No fix listed CWE-89
TI-2026-44533 CVE-2026-62414 · GHSA-4jc6-j4qv-pxq3

Improper access control in joomlack.fr Page Builder CK extension for Joomla

Priority MEDIUM 47

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00404 Published 2026-07-20 No fix listed CWE-284
TI-2026-45024 CVE-2026-63048 · GHSA-qjw4-6j2q-9mgr

Unrestricted file upload in joomlack.fr Page Builder CK extension for Joomla

Priority MEDIUM 43

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading t…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00382 Published 2026-07-22 No fix listed CWE-434
TI-2026-54268 CVE-2026-77993 · GHSA-vrrp-8526-8v58

Cross-site scripting in joomlack.fr Page Builder CK extension for Joomla

Priority LOW 30

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00436 Published 2026-08-24 No fix listed CWE-79
Open these records in search →