An arbitrary file upload vulnerability exists in Joomla Page Builder CK version 3.5.10 and earlier. This vulnerability allows attackers to upload files to the affected system, potentially leading to unauthorized code execution or other malicious activities. The affected product is used with Joomla 4.x and 5.x on Linux platforms. No detailed technical information or vendor remediation guidance is currently available. Exploit-DB has listed this as an exploit, but no active exploitation is confirmed.

If exploited, this vulnerability could allow an attacker to upload arbitrary files to the server hosting Joomla Page Builder CK, potentially leading to remote code execution or compromise of the affected system. However, no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict file upload permissions and monitor for suspicious activity related to file uploads in Joomla Page Builder CK.