Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: themexpert.com Clear all filters
TI-2026-42794 CVE-2026-60027 · GHSA-2jwh-h49v-x83h

Path traversal in themexpert.com Quix Page Builder Pro extension for Joomla

Priority MEDIUM 44

Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00518 Published 2026-07-20 No fix listed CWE-22
TI-2026-42796 CVE-2026-60029 · GHSA-hxf2-968r-35qp

Cross-site scripting in themexpert.com Quix Page Builder Pro extension for Joomla

Priority LOW 24

Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00418 Published 2026-07-20 No fix listed CWE-79
TI-2026-42793 CVE-2026-60026 · GHSA-pcwx-c962-fh8r

Code injection in themexpert.com Quix Page Builder Pro extension for Joomla

Priority MEDIUM 41

Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated PHP code execution.

CVSS 4.0HIGH 8.9 Network High privileges No interaction EPSS 0.00527 Published 2026-07-20 No fix listed CWE-94
TI-2026-42801 CVE-2026-60034 · GHSA-jr2x-pvg7-cmq5

Cross-site scripting in themexpert.com JMedia extension for Joomla

Priority MEDIUM 43

Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to a stored XSS vulnerability.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00418 Published 2026-07-20 No fix listed CWE-79
TI-2026-42799 CVE-2026-60032 · GHSA-3qgh-5pfw-cjfw

Unrestricted file upload in themexpert.com JMedia extension for Joomla

Priority MEDIUM 43

Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0 - The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upload, leading to RCE.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.00409 Published 2026-07-20 No fix listed CWE-434
TI-2026-42795 CVE-2026-60028 · GHSA-c3vf-cjgw-qqp3

Cross-site scripting in themexpert.com Quix Page Builder Pro extension for Joomla

Priority MEDIUM 40

Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00418 Published 2026-07-20 No fix listed CWE-79
TI-2026-41829 CVE-2026-58078 · GHSA-4v43-gx32-wcrj

SQL injection in themexpert.com Quix Page Builder Pro extension for Joomla

Priority MEDIUM 46

Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an unauthenticated SQL injection.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00401 Published 2026-07-16 No fix listed CWE-89