CVE-2026-61900 Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE...

CVE-2026-61900

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE...

CVE-2026-61901

CVE-2026-61901 affects the Joomla Hikashop extension and is a reported open redirect vulnerability. The CVE records indicate Hikashop versions prior to 6.5.2 are affected, with the issue arising from an open redirect mechanism. The referenced CVE entries across NVD, CVE List, and Vuln enrichment ...

CVE-2026-61901 Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2

Joomla Extension - hikashop.com - Open redirect in Hikashop 6.5.2 - The Joomla extension Hikashop is vulnerable to an open redirect...

CVE-2026-61901

Joomla Extension - hikashop.com - Open redirect in Hikashop 6.5.2 - The Joomla extension Hikashop is vulnerable to an open redirect...

CVE-2026-61901 Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2

The Joomla extension Hikashop is vulnerable to an open redirect...

EUVD-2026-46063

The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element...

CVE-2026-60027

Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read...

CVE-2026-60027 Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1

Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read...

CVE-2026-60027 Joomla Extension - themexpert.com - Unauthenticated path traversal / file read in Quix Page Builder < 6.2.1

The Joomla extension Quix Page Builder Pro is vulnerable to a unauthenticated path traversal via form elements. Unauthenticated users frontend users are allowed traversal paths and read arbitrary files. Requires a published page with a Form element...

CVE-2026-60027

The CVE concerns the Joomla extension Quix Page Builder Pro (pre-6.2.1 per CVE listing) and describes an unauthenticated path traversal vulnerability via form elements. An unauthenticated frontend user can traverse paths and read arbitrary files, requiring a published page containing a Form eleme...

CVE-2026-60031 Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1

Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses...

CVE-2026-60031

Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses...

EUVD-2026-46060

The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses...

CVE-2026-60031 Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1

Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses...

CVE-2026-60031

The vulnerability CVE-2026-60031 affects the Joomla extension Quix Page Builder Pro (prior to version 6.2.1). The issue is an information disclosure resulting from raw exceptions being reflected in AJAX handler responses, enabling leakage of potentially sensitive data. Local context: affected com...

CVE-2026-60029

The CVE concerns Joomla extension Quix Page Builder Pro (thethemexpert) with an authenticated stored XSS flaw. The issue allows an authenticated builder user to break out of id/class fields that render to public pages. Affected version(s) are Quix Page Builder Pro before 6.2.1; remediation is upg...

CVE-2026-60029 Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1

The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users...

CVE-2026-60029 Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder < 6.2.1

Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users...

EUVD-2026-46059

The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder users could break out of id/class fields that render for public users...