https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T15:08:12.445470+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-60028 CVE-2026-60028 — Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 2026-10-10T15:08:12.446634+00:00

Affected: themexpert.com Quix Page Builder Pro extension for Joomla

Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.