Security Advisory

CVE-2026-63048

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-22 07:15:25
Last updated 2026-07-23 14:57:05
Assigner Joomla
CVSS score 9.4
State PUBLISHED

Description

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.