Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2026-56290

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0

Description

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

joomlack.fr JoomlaCK.fr Page Builder CK extension for Joomla

Default version status: unaffected

  • 1.0-3.6.0affected

References