CVE-2026-77994

The Page Builder CK Joomla extension, versions prior to 3.6.5, is susceptible to a second-order SQL injection vulnerability in the loadStyles method of the frontend page model, allowing attackers to execute arbitrary SQL queries. This critical flaw could lead to unauthorized data access or manipulation, posing significant risks to the integrity and confidentiality of affected Joomla installations. Joomla administrators and web developers using this extension should prioritize immediate updates to mitigate potential exploitation.