Threat database

A reflected cross-site scripting (XSS) vulnerability exists in the Joomla extension Page Builder CK versions 1.0.0 through 3.6.4. The vulnerability is triggered via the iscontenttype parameter. This flaw allows an attacker to inject malicious scripts that could be executed in the context of a user's browser session.

A critical SQL injection vulnerability (CWE-89) exists in the Page Builder CK extension for Joomla versions up to 3.6.4. The flaw is related to the loadStyles method in the frontend page model and allows improper neutralization of special elements used in SQL commands. This vulnerability has a CVSS 4.0 base score of 9.3, indicating a high severity with network attack vector and no required privileges or user interaction.

The Joomla extension Page Builder CK versions up to 3.6.4 are vulnerable to an SQL injection flaw affecting the styles model. This vulnerability allows an attacker to execute arbitrary SQL commands due to improper neutralization of special elements in SQL queries. The issue was fixed in version 3.6.5 for the backend and in 3.6.4 for the frontend.

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.

An improper access control vulnerability exists in the Page Builder CK extension for Joomla versions prior to 3.6.2. This flaw allows unauthorized access to frontend page list views, potentially exposing sensitive content or functionality. The vulnerability is identified as CWE-284 and carries a critical severity rating with a CVSS score of 9.1. No official patch or remediation guidance has been provided yet by the vendor.

Joomla Page Builder CK 3.5.10 - Arbitrary File Upload

Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.