CVE-2026-77994

Description

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-77994 ↗
• www.joomlack.fr/ ↗

Related CVEs

• CVE-2026-77995miniorange.com / miniOrange OAuth Client (free) extension for Joomla · +3CVSS 10.0
• CVE-2026-66587WPCafe / WP Cafe ProCVSS 9.8
• CVE-2026-66897Canonical / LXDCVSS 9.9
• CVE-2026-77992fabrikar.com / Fabrik extension for JoomlaCVSS 9.5
• CVE-2026-76607fabrikar.com / Fabrik extension for JoomlaCVSS 10.0
• CVE-2026-74254joomlack.fr / Page Builder CK extension for JoomlaCVSS 9.3
• CVE-2026-63048joomlack.fr / Page Builder CK extension for JoomlaCVSS 9.4
• CVE-2026-62414joomlack.fr / Page Builder CK extension for JoomlaCVSS 9.1