Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: joomlack.fr Clear all filters
TI-2026-54268 CVE-2026-77993 · GHSA-vrrp-8526-8v58

Cross-site scripting in joomlack.fr Page Builder CK extension for Joomla

Priority LOW 30

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00436 Published 2026-08-24 No fix listed CWE-79
TI-2026-54269 CVE-2026-77994 · GHSA-mqwq-c23w-58cg

SQL injection in joomlack.fr Page Builder CK extension for Joomla

Priority MEDIUM 48

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page m…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00386 Published 2026-08-24 No fix listed CWE-89
TI-2026-52039 CVE-2026-74254 · GHSA-2r8h-jv53-973m

SQL injection in joomlack.fr Page Builder CK extension for Joomla

Priority MEDIUM 48

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00386 Published 2026-08-17 No fix listed CWE-89
TI-2026-45024 CVE-2026-63048 · GHSA-qjw4-6j2q-9mgr

Unrestricted file upload in joomlack.fr Page Builder CK extension for Joomla

Priority MEDIUM 43

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading t…

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00382 Published 2026-07-22 No fix listed CWE-434
TI-2026-44533 CVE-2026-62414 · GHSA-4jc6-j4qv-pxq3

Improper access control in joomlack.fr Page Builder CK extension for Joomla

Priority MEDIUM 47

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00404 Published 2026-07-20 No fix listed CWE-284