Advisories · Technology
joomlack.fr Page Builder CK extension for Joomla.
Every CVE that names joomlack.fr Page Builder CK extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5
- joomlack.fr Page Builder CK extension for Joomla
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5
- joomlack.fr Page Builder CK extension for Joomla
- SQL injection
- CVSS 9.3 CriticalCritical · CVSS 9+
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5
- joomlack.fr Page Builder CK extension for Joomla
- SQL injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2
- joomlack.fr Page Builder CK extension for Joomla
- Unrestricted file upload
- CVSS 9.1 CriticalCritical · CVSS 9+
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2
- joomlack.fr Page Builder CK extension for Joomla
- Broken access control
- CVSS 10.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0
- JoomlaCK.fr Page Builder CK extension for Joomla
- Unrestricted file upload