Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hxf2-968r-35qp

Опубликовано: 20 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.1

Описание

The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users.

The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users.

EPSS

Процентиль: 35%
0.00418
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
около 1 месяца назад

Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users.

EPSS

Процентиль: 35%
0.00418
Низкий

5.1 Medium

CVSS4

Дефекты

CWE-79