PT-2026-61676 · WordPress · Quix Page Builder Pro
CVE-2026-60029
·
Published
2026-07-20
·
Updated
2026-07-20
CVSS v4.0
5.1
Medium
| Vector | AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Quix Page Builder versions prior to 6.2.1
Description
Quix Page Builder Pro contains a stored Cross-Site Scripting (XSS) flaw. Authenticated builder users can inject malicious scripts by breaking out of the
id and class fields, which are then rendered for public users. Cross-Site Scripting (XSS) is a type of security flaw that allows an attacker to inject malicious scripts into content that other users view.Recommendations
Update Quix Page Builder to version 6.2.1 or later.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Quix Page Builder Pro