CVE-2026-60029

Description

The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users.

References

• https://www.themexpert.com/quix-pagebuilder