CVE-2026-77993: Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5
Published Aug 24, 2026
·Updated
Joomla Extension - joomlack.fr - Reflected XSS in Page Builder CK < 3.6.5 - The Joomla extension Page Builder CK is vulnerable to a reflected XSS via the iscontenttype parameter.
Affected Software
1 affected component
Page Builder CK<3.6.5
Event History
Aug 24, 2026
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
DescriptionWeakness
Data Sourced
via NVD·08:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What input is vulnerable?
The reflected XSS is triggered through the iscontenttype parameter.
2
Which installations are affected?
Page Builder CK versions earlier than 3.6.5 are affected.