CVE-2026-63048CWE-434unrestricted-file-upload

CVE-2026-63048

published July 22, 2026

CVSS
9.4
EPSS
0%
Percentile
31.0
In the wild
Unconfirmed
What it is

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 1.0.0-3.1.2, 3.4.0-3.4.11, 3.5.0-3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE.

The record
Technical detail
CVSS
9.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00382 · 31.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-07-22T12:16Z
References (1)
https://www.joomlack.fr/ · [email protected]
EPSS history
Timeline
  • 22 JUL 07:15Z
    Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2
    cvelistv5