CVE-2026-60031 describes an information disclosure vulnerability in the themexpert.com Quix Page Builder Pro extension for Joomla. Versions from 1.0 up to and including 6.2.0 are affected. The vulnerability occurs because raw exceptions are exposed in AJAX handler responses, which can leak sensitive information to unauthorized users. This flaw is classified under CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor). There is no vendor advisory or patch information available at this time, and no known exploits have been reported in the wild.

Sensitive information may be exposed to unauthorized actors through the reflection of raw exception messages in AJAX responses. This could aid attackers in gathering information about the system or application internals, potentially facilitating further attacks. However, there is no indication of privilege escalation or direct system compromise from this vulnerability alone.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.