Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload

Joomla Page Builder CK contains an unrestricted file upload vulnerability caused by lack of proper validation, letting unauthenticated attackers upload executable files and achieve remote code execution. id: CVE-2026-56290 info: name: Page Builder CK = 3.5.10 - Unauthenticated Arbitrary File Uplo...

PageBuilderCK-CVE-2026-56290-Exploit

Page Builder CK — fonts.save RCE Probe CVE-2026-56290 BlackHat Team proof-of-concept scanner for the Joomla Page Builder CK fonts.save vulnerability. POC CVE-2026-56290 Author: @mrzblackhat Team: BlackHat Team Credits: Peyman Siyahi · MR.PERSIA Overview This tool probes Joomla sites running the...

pbck-exploit

Mass Exploitation & Validation Framework for Joomla Page Builder CK Unauthenticated Arbitrary File Upload → Remote Code Execution 📑 Table of Contents Vulnerability Overview Affected Versions Features Installation Usage Proof of Concept Technical Deep-Dive Detection Methodology Defense & Mitigatio...

CVE-2026-77994

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...

CVE-2026-77993

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...

CVE-2026-77993

The Joomla extension Page Builder CK (joomlack.fr) is affected by a reflected cross-site scripting (XSS) vulnerability via the iscontenttype parameter in versions prior to 3.6.5 . An attacker can craft a malicious URL that, when visited by a user, executes arbitrary script in the victim's browser...

CVE-2026-77993 Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...

CVE-2026-77993 Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...

EUVD-2026-64751

Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter...

CVE-2026-77994 Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...

EUVD-2026-64750

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...

CVE-2026-77994 Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model...

CVE-2026-77994

Page Builder CK (version

CVE-2026-74254

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

EUVD-2026-60304

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

CVE-2026-74254 Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

CVE-2026-74254

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

CVE-2026-74254 Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend...

CVE-2026-74254

CVE-2026-74254 is a SQL injection vulnerability in the Page Builder CK Joomla extension (by joomlack.fr), specifically in the styles model . The flaw allows an unauthenticated, remote attacker to interfere with database queries, potentially leading to data exfiltration, modification, or service d...

PT-2026-76727

Name of the Vulnerable Software and Affected Versions Page Builder CK versions prior to 3.6.5 Description The Page Builder CK extension for Joomla contains a SQL injection flaw within the styles model. This issue allows an attacker to interfere with the queries that an application makes to its...