VULNERABILITY INTELLIGENCE
CVE-2026-74254
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-08-17
Last modified2026-10-23
Description
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.
Weakness classification
- security@joomla.org: CWE-89