Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-60028

Опубликовано: 20 июл. 2026
Источник: nvd
EPSS Низкий

Описание

Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.

EPSS

Процентиль: 16%
0.00247
Низкий

Дефекты

CWE-79

Связанные уязвимости

github
около 1 месяца назад

The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.

EPSS

Процентиль: 16%
0.00247
Низкий

Дефекты

CWE-79
Уязвимость CVE-2026-60028