Approved changes feed: RSS · Atom

cpe:2.3:a:themexpert.com:quix_page_builder_pro_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThemexpert.Com (b72e6aab-a5bf-5c12-afa1-3f5c8423f77a)
ProductQuix Page Builder Pro Extension For Joomla (4f2cbafd-e493-5781-998e-c6f89b4852c7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-60031 vulnerable 2026-07-29 01:03:23.708309 Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses.
Published: 2026-07-20T18:12:00.724Z
Updated: 2026-07-23T14:58:26.686Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60030 vulnerable 2026-07-29 01:03:23.708209 Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions.
Published: 2026-07-20T18:11:08.106Z
Updated: 2026-07-23T14:57:16.645Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60029 vulnerable 2026-07-29 01:03:23.708092 Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users.
Published: 2026-07-20T18:11:58.374Z
Updated: 2026-07-23T14:58:21.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60028 vulnerable 2026-07-29 01:03:23.707868 Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.
Published: 2026-07-20T18:09:33.059Z
Updated: 2026-07-23T14:55:21.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60027 vulnerable 2026-07-29 01:03:23.707751 Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.
Published: 2026-07-20T18:14:30.884Z
Updated: 2026-07-23T15:01:40.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60026 vulnerable 2026-07-29 01:03:23.707436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-58078 vulnerable 2026-07-29 01:03:16.619468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.