Arbitrary file upload in Joomlack.fr Page Builder Ck Extension For Joomla

CVE-2026-63048

The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.

Vulnerability class: Unrestricted File Upload

Affected products

Weakness classification (CWE)

References