← Back to CVE search

CVE-2026-56290

Page Builder CK

Description

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

CVSS 9.8EPSS 83.25399999999999%Risk 8.32
View source
Published
2026-06-29 15:16:42
Affected versions
unknown
Type
Web application
Last modified
2026-07-24 13:31:02
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H