What is GHSA-c3vf-cjgw-qqp3?

GHSA-c3vf-cjgw-qqp3 is a security advisory published by GitHub Security Advisories with High severity. The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS...

Which CVE IDs does GHSA-c3vf-cjgw-qqp3 cover?

GHSA-c3vf-cjgw-qqp3 covers the following CVE IDs: CVE-2026-60028. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-c3vf-cjgw-qqp3High

The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS...

Vendor

GitHub Security Advisories

Published

July 20, 2026

Last Modified

July 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-60028 →

📋 Description

The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-60028
https://www.themexpert.com/quix-pagebuilder
https://github.com/advisories/GHSA-c3vf-cjgw-qqp3