SQL Injection in Joomlack.fr Page Builder Ck Extension For Joomla
CVE-2026-74254
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.
Vulnerability class: SQL Injection
Affected products
- Joomlack.fr Page Builder Ck Extension For Joomla — versions 1.0.0-3.6.4
Weakness classification (CWE)
References
- security@joomla.org (product)