CVE-2026-77994: Joomlack.fr Page Builder Ck Extension For Joomla

Critical severity, CVSS 9.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.

Affected products

• Joomlack.fr Page Builder Ck Extension For Joomla: version 1.0.0-3.6.4 only

Published 2026-08-24. Last modified 2026-08-26.