CVE-2026-60027

creationtimestamp| type| source ---|---|--- 2026-07-20 21:24:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr4a5lmfox2q...

CVE-2026-60027

The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element...