CVE Intelligence

Themexpert.com vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Themexpert.com products: 10 record(s), with severity, exploitation and fixes.

Quix Page Builder Pro extension for Joomla 7JMedia extension for Joomla 3

Exploited only (KEV) →

CVE-2026-60034 Critical · 9.4 CWE-79 Jul 20, 2026
Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0
Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to a stored XSS vulnerability. Unsanitised SVG uploads served without nosniff, leading to stored/reflected XSS.
CVE-2026-60033 Medium · 5.1 CWE-918 Jul 20, 2026
Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0
Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0 - The Joomla extension JMedia is vulnerable to an SSRF vulnerability. Remote-URL download could target internal/reserved addresses.
CVE-2026-60032 Critical · 9.4 CWE-434 Jul 20, 2026
Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0
Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0 - The Joomla extension JMedia is vulnerable to an authenticated arbitrary file upload, leading to RCE. Executable uploads/writes possible (incl. polyglot filenames); chmod didn't strip execute bits.
CVE-2026-60031 Medium · 6.9 CWE-200 Jul 20, 2026
Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses.
CVE-2026-60030 High · 8.7 CWE-284 Jul 20, 2026
Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions.
CVE-2026-60029 Medium · 5.1 CWE-79 Jul 20, 2026
Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users.
CVE-2026-60028 High · 8.6 CWE-79 Jul 20, 2026
Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.
CVE-2026-60027 High · 8.7 CWE-22 Jul 20, 2026
Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element.
CVE-2026-60026 High · 8.9 CWE-94 Jul 20, 2026
Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Authenticated PHP code execution in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated PHP code execution. Authenticated builder user (core.create/core.edit) could inject PHP tags in element content, that got executed via view-cache include(). Requires caching on (default).
CVE-2026-58078 High · 8.7 CWE-89 Jul 16, 2026
Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1
Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an unauthenticated SQL injection.