Vulnerabilities CVE-2026-60028

CVE-2026-60028

High

Open

TLP:CLEAR

Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.

Details

CVSS Score: 8.6
EPSS Score ⓘ: 0.25%

16.2th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Confidence: 90%
Published: Jul 20, 2026
Last Modified: Jul 20, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.