Page Builder CK extension for Joomla vulnerabilities
4 known vulnerabilities in Page Builder CK extension for Joomla from Joomlack.fr. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.3 Critical severity
Page Builder CK extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - joomlack.fr - Second order SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the loadStyles method of the frontend page model.
- 9.3 Critical severity
Page Builder CK extension for Joomla: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a SQL injection issue related to the styles model. Version 3.6.4 fixed the vector in the frontend, 3.6.5 in the backend.
- 9.4 Critical severity
Page Builder CK extension for Joomla: Unrestricted Upload of File with Dangerous Type
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.
- 9.1 Critical severity
Page Builder CK extension for Joomla: Improper Access Control
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK does not properly apply access control to frontend page list views.