PT-2026-61677 · Themexpert.Com · Quix Page Builder Pro Extension For Joomla

CVE-2026-60030 · Published 2026-07-20 · Updated 2026-07-20

NVD

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2026-60030

Affected Products

Quix Page Builder Pro Extension For Joomla

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-60030 · Security Note
• https://themexpert.com/quix-pagebuilder · Note