CVE Catalog
CVE-2026-74254
CriticalCVSS 9.3Summary
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.
Risk Assessment
An attacker could inject SQL queries, potentially leading to unauthorized database access and possibly site compromise.
Recommendation
Upgrade Page Builder CK to version 3.6.5 or later.
Original NVD description (English source)
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.