Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2jwh-h49v-x83h

Опубликовано: 20 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.7

Описание

The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.

The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.

EPSS

Процентиль: 28%
0.00346
Низкий

8.7 High

CVSS4

Дефекты

CWE-22

Связанные уязвимости

nvd
около 1 месяца назад

Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.

EPSS

Процентиль: 28%
0.00346
Низкий

8.7 High

CVSS4

Дефекты

CWE-22