Authenticated Stored XSS Vulnerability in Quix Page Builder Pro by Joomla
CVE-2026-60029

5.1MEDIUM

Key Information:

Vendor

Themexpert.com

Status
Quix Page Builder Pro Extension For Joomla
Vendor
CVE Published:
20 July 2026

What is CVE-2026-60029?

The Quix Page Builder Pro extension for Joomla has a vulnerability that permits authenticated users to exploit stored XSS. This occurs when builder users manipulate id/class fields, which are rendered publicly, allowing potential attackers to inject malicious scripts.

Affected Version(s)

Quix Page Builder Pro extension for Joomla 1.0-6.2.0

References

https://www.themexpert.com/quix-pagebuilder
product

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.