Skip to content
OpenAdvisories
High · 8.7 CVE-2026-60027 EUVD-2026-46063GHSA-2jwh-h49v-x83h

Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1

Published Jul 20, 2026 · Updated Jul 23, 2026 · Assigned by Joomla

Description

Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.

Affected products

VendorProductAffectedFixed
themexpert.com Quix Page Builder Pro extension for Joomla 1.0-6.2.0 —

References