← CVE Intelligence

CVE-2026-56290

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 PUBLISHED

Description (CNA)

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

Affected (CNA)

Vendor / productVersions
joomlack.fr / JoomlaCK.fr Page Builder CK extension for Joomlaaffected 1.0-3.6.0

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.