# joomlack.fr Page Builder CK extension for Joomla.

Every CVE that names joomlack.fr Page Builder CK extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5](https://agentprime.io/advisories/CVE-2026-77993.md)
  `CVE-2026-77993` · CVE record: joomlack.fr Page Builder CK extension for Joomla · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS)
- [Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5](https://agentprime.io/advisories/CVE-2026-77994.md)
  `CVE-2026-77994` · CVE record: joomlack.fr Page Builder CK extension for Joomla · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: SQL injection
- [Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5](https://agentprime.io/advisories/CVE-2026-74254.md)
  `CVE-2026-74254` · CVE record: joomlack.fr Page Builder CK extension for Joomla · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: SQL injection
- [Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2](https://agentprime.io/advisories/CVE-2026-63048.md)
  `CVE-2026-63048` · CVE record: joomlack.fr Page Builder CK extension for Joomla · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Jul 2026 · Tags: Unrestricted file upload
- [Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2](https://agentprime.io/advisories/CVE-2026-62414.md)
  `CVE-2026-62414` · CVE record: joomlack.fr Page Builder CK extension for Joomla · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jul 2026 · Tags: Broken access control
- [Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0](https://agentprime.io/advisories/CVE-2026-56290.md)
  `CVE-2026-56290` · CVE record: joomlack.fr JoomlaCK.fr Page Builder CK extension for Joomla · CVSS 10.0 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.31 · Not analysed yet · Published 29 Jun 2026 · Tags: Unrestricted file upload

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=joomlack-fr-page-builder-ck-extension-for-joomla>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/joomlack-fr-page-builder-ck-extension-for-joomla/>. Everything for agents: <https://agentprime.io/llms.txt>.