CVE Catalog
CVE-2026-77994
CriticalCVSS 9.3Summary
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.
Risk Assessment
The risk includes potential unauthorized access to the database, which can lead to data leakage, content modification, or takeover of the Joomla site.
Recommendation
It is recommended to immediately update the Page Builder CK extension to version 3.6.5 or later, which includes the fix.
Original NVD description (English source)
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.