Arbitrary file upload in Joomlack.fr Page Builder Ck Extension For Joomla
CVE-2026-63048
The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.
Vulnerability class: Unrestricted File Upload
Affected products
- Joomlack.fr Page Builder Ck Extension For Joomla — versions 1.0.0-3.6.2
Weakness classification (CWE)
References
- security@joomla.org (product)