CVE Catalog
CVE-2026-74254
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk0.28%
21th percentile - higher than 21% of all known CVEs
Summary
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.
Risk Assessment
An attacker could inject SQL queries, potentially leading to unauthorized database access and possibly site compromise.
Recommendation
Upgrade Page Builder CK to version 3.6.5 or later.
Original NVD description (English source)
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.