joomlack.fr / JoomlaCK.fr Page Builder CK extension for Joomla
10.0 · CVSS 4.0CriticalCISA KEV
CISA lists this CVE as exploited in the wild. Patch it before anything rated by score alone.
Description
Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.