PT-2026-61675 · Themexpert.Com · Quix Page Builder Pro Extension For Joomla

CVE-2026-60028 · Publicado 2026-07-20 · Atualizado 2026-07-20

Mitre

CVSS v4.0

8.6

Alta

Vetor base

AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-60028

Produtos afetados

Quix Page Builder Pro Extension For Joomla

Referências · 2

• https://themexpert.com/quix-pagebuilder · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-60028 · Nota de Segurança