PT-2026-53285 · Joomla · Page Builder Ck
CVSS v4.0
10
Critical
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y/U:Red |
Name of the Vulnerable Software and Affected Versions
Page Builder CK versions prior to 3.6.0
Description
An unauthenticated arbitrary file upload flaw exists in the Page Builder CK extension for Joomla. The issue stems from improper access control, insufficient server-side restrictions on uploaded file paths and types, and improper input validation. A remote attacker can exploit the
browse.ajaxAddPicture() function to upload executable files, such as PHP webshells, directly to the web server. This can lead to full remote code execution (RCE) in the context of the web server, potentially resulting in complete site takeover and data theft.Recommendations
Update Page Builder CK to version 3.6.0 or later.
Exploit
Fix
RCE
Improper Access Control
Unrestricted File Upload
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Page Builder Ck