CVE-2026-60027
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Path traversal and file read vulnerability in Quix Page Builder for Joomla (versions < 6.2.1). Unauthenticated users can exploit form elements to read arbitrary files on the server.
Risk Assessment
Risk of disclosure of sensitive system files or application data by unauthenticated users.
Recommendation
Update Quix Page Builder to version 6.2.1 or later and remove unused pages with form elements.
Other vulnerabilities in Quix Page Builder
See all- CVE-2026-60031Medium
The Joomla extension Quix Page Builder Pro before version 6.2.1 discloses information by returning raw exceptions in AJAX handler responses. This vulnerability allows technical data leakage.
- CVE-2026-60030High
Broken access control vulnerability in Joomla extension Quix Page Builder before version 6.2.1. Authenticated users can upload media files regardless of their media management permissions.
- CVE-2026-60029Medium
The Joomla extension Quix Page Builder Pro before version 6.2.1 contains an authenticated stored XSS vulnerability. Authenticated users can inject malicious code into id/class fields that are rendered for public users.
- CVE-2026-60028High
Authenticated Stored XSS vulnerability in Quix Page Builder for Joomla (versions < 6.2.1). An authenticated builder user can inject scripts that execute for any visitor, due to unescaped output and unsanitized SVG.
Original NVD description (English source)
Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.