SQL Injection in Joomlack.fr Page Builder Ck Extension For Joomla
CVE-2026-77994
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.
Vulnerability class: SQL Injection
Affected products
- Joomlack.fr Page Builder Ck Extension For Joomla — versions 1.0.0-3.6.4
Weakness classification (CWE)
References
- security@joomla.org (product)