CVE-2026-60029

Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users.

Score

CVSS 4.0 5.1 Medium

Status

Deferred - security@joomla.org

Published

2026-07-20

Last modified

2026-10-24

Weaknesses

CWE-79

Affected products

• Quix Page Builder Pro Extension For Joomla (Themexpert.com)

References

• https://www.themexpert.com/quix-pagebuilder