Veille CVE

Recherche « themexpert.com Quix Page Builder Pro extension for Joomla »

7 CVE

Critique 0 Élevée 5 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « themexpert.com Quix Page Builder Pro extension for Joomla » ✕
  1. CVE-2026-60031 6.9 Moyenne

    themexpert.com Quix Page Builder Pro extension for Joomla

    Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses.

  2. CVE-2026-60030 8.7 Élevée

    themexpert.com Quix Page Builder Pro extension for Joomla

    Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions.

  3. CVE-2026-60029 5.1 Moyenne

    themexpert.com Quix Page Builder Pro extension for Joomla

    Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users.

  4. CVE-2026-60028 8.6 Élevée

    themexpert.com Quix Page Builder Pro extension for Joomla

    Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.

  5. CVE-2026-60027 8.7 Élevée

    themexpert.com Quix Page Builder Pro extension for Joomla

    Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.

  6. CVE-2026-60026 8.9 Élevée

    themexpert.com Quix Page Builder Pro extension for Joomla

    Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated PHP code execution. Authenticated builder user (core.create/core.edit) could inject PHP tags in element content, that got executed via view-cache include(). Requires caching on (default).

  7. CVE-2026-58078 8.7 Élevée

    themexpert.com Quix Page Builder Pro extension for Joomla

    Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an unauthenticated SQL injection.