CVE-2026-74254: Joomlack.fr Page Builder Ck Extension For Joomla

Critical severity, CVSS 9.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.

Affected products

• Joomlack.fr Page Builder Ck Extension For Joomla: version 1.0.0-3.6.4 only

Published 2026-08-17. Last modified 2026-08-26.