Ghostwire

CVE-2026-60027: The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements....

HIGH CVSS 0.0

Published: July 20, 2026 | Last Modified: July 21, 2026

Description

The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (1 articles)

References