CVE-2026-60027
EUVD-2026-4606320.07.2026, 19:17
The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.
Awaiting analysis
This vulnerability is currently awaiting analysis.