<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 10 Oct 2026 16:06:41 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-60028</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2026-60028</link>
      <description>&lt;p&gt;Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder &amp;lt; 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Joomla Extension - themexpert.com - Authenticated stored XSS in Quix Page Builder &amp;lt; 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2026-60028</guid>
    </item>
    <item>
      <title>GHSA-c3vf-cjgw-qqp3</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-c3vf-cjgw-qqp3</link>
      <description>&lt;p&gt;The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;The Joomla extension Quix Page Builder Pro is vulnerable to an authenticated stored XSS vulnerability. Authenticated builder user could inject scripts, fires for any visitor or admin viewing the page. Unescaped output + unsanitised SVG.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-c3vf-cjgw-qqp3</guid>
    </item>
  </channel>
</rss>
