CVE-2026-77993

The Page Builder CK extension for Joomla is vulnerable to a reflected cross-site scripting (XSS) attack through the iscontenttype parameter in versions prior to 3.6.5. This vulnerability could allow an attacker to execute arbitrary scripts in the context of a user's session, potentially leading to data theft or session hijacking. Joomla administrators using this extension should prioritize applying the latest updates to mitigate the risk.