CVE-2026-60030CWE-284

Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1

High · published July 20, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
33.7
In the wild
Unconfirmed
What it is

Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00406 · 33.7th percentile
Weakness
CWE-284 · Improper Access Control
Published
2026-07-20T18:11Z
EPSS history
Timeline
  • 20 JUL 18:11Z
    Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1
    cvelistv5