CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
What the vulnerability does
Joomla Extension - themexpert.com - Information disclosure in Quix Page Builder < 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an information disclosure. Raw exceptions reflected in AJAX handler responses.
Explanation of Vulnerability in Simple Terms
The Quix Page Builder Pro extension for Joomla contains an information exposure vulnerability that allows unauthenticated attackers to access sensitive data over the network. The vulnerability requires no user interaction and can be exploited remotely. Site administrators should update to a patched version when available.
What an attacker can do
Read sensitive information from the site without authentication.
Potential impact on your site
Unauthorized users can access confidential data stored or processed by the Quix Page Builder Pro extension.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
