Quix Pro Update — 6.3.1

# 6.3.2

# 20-09-2026

[](#Fix)

  - The builder no longer reloads over and over without opening.

  - The builder no longer bounces back and forth with the login page instead of opening.

  - Front-end editors can now open the builder for pages they are allowed to edit.

  - A page whose Quix files are missing now reports what is missing in Debug / Error Logs instead of coming back blank.

# 6.3.1

# 17-09-2026

[](#Fix)

  - Pages could fail to save with an error when Smart Search was enabled.

  - Pages saved in the builder now appear in Smart Search without waiting for a reindex.

  - Icons could fail to load after clearing the Quix cache on busy sites.

  - Search results could fail to load on sites using the Atom template.

# 6.3.0

# 15-09-2026

[](#New)

  - Editor element: rich text that keeps exactly the formatting you give it, with no Quix fonts or colours added.

  - Open any text editor in a large popup to work comfortably with long content.

  - Joomla Articles: new Carousel layout with arrows, dots and pause on hover.

[](#Improve)

  - The text editor in the element settings now shows the element's font, so formatting looks the way it will on the page.

  - The element settings panel can be widened by dragging its edge and remembers the width you choose.

[](#Fix)

  - Bold text now shows as bold on the page, not only in the text edi

  - Formatting, undo and changes made in the editor's Code tab now sh away.

  - List bullets now take the colour of their text.

  - The element settings panel no longer changes width when you click

  - Elements with a default placeholder image now show in the builder

  - Modal Popup is available in the builder again.

 

# 6.2.9

# 03-09-2026

 

[](#New)

  - Add carousel layout and navigation options for Joomla Articles

[](#Fix)

  - The builder no longer sits on the loading animation forever when the canvas fails to open; it now explains what went wrong within a few seconds.

  - The builder canvas recovers on its own when the site is opened on a different address than the one set in Global Configuration.

  - The builder now reports when the canvas is redirected to a login, Page Not Found, or home page instead of loading the editor.

  - Restored the correct multilingual check so language prefixes are only added on sites that actually use the language filter.

  - Resolved article sorting issue

 

 

# 6.2.8

# 20-08-2026

[](#Improve)

  - Error Logs now show which page and link caused the problem.

  - The error log no longer fills up with Page Not Found entries.

[](#Fix)

  - The builder now opens and saves on sites installed in a subfolder.

  - Old or mistyped Quix links now show Page Not Found instead of an error page.

# 6.2.7

# 18-08-2026

[](#New)

  - Joomla Articles: pick several categories at once.

  - Media manager problems now show up in Debug / Error Logs.

[](#Improve)

  - Clearing Joomla's cache now clears the Quix cache too.

  - The builder responds quicker on sites using search engine friendly URLs.

  - Refreshed the admin screens and imagery for Quix 6 with a lighter, cleaner look.

[](#Fix)

  - The media manager now opens on multilingual sites.

  - Joomla Articles: articles show again when Child Category Articles is off.

  - Template preview now opens the right page on multilingual sites.

  - Installing and updating Quix from the Joomla command line now works.

[](#Security)

  - Fixed a SQL injection vulnerability in the Joomla Articles element.

  - Blocked unauthorised changes to session and cookie data.

  - Updated bundled libraries with the latest security fixes.

# 6.2.6

# 12-08-2026

[](#Fix)

  - Images no longer shrink to a small square or lose their shape.

# 6.2.5 

# 10-08-2026

[](#New)

  - Release notes now open straight from Joomla's Update screen.

  - Joomla Module element: choose whether the module shows its title.

  - The SEO panel now tells you when the SEO Site Attributes plugin is switched off.

[](#Improve)

  - Google Fonts no longer hide your text while they load.

  - Self-hosted font mode stops contacting Google entirely.

  - Clearing the Quix cache now also refreshes the builder, so fixes apply straight away.

  - Tidier, more compact Layers panel and a clearer active tab in element settings.

  - Updated the bundled JMedia media manager to 1.6.2.

[](#Fix)

  - Fixed the builder getting stuck loading, and elements failing to render, after a cache clear.

  - Fixed a fatal error on PHP 8.5.

  - Joomla modules with scripts or widgets now render in the builder.

  - Imported pages now bring their images with them.

  - Gallery: the lightbox close button is visible on light images again.

  - Videos and images no longer make the page jump about while it loads.

  - Icon List: the Horizontal layout now applies in the builder.

  - Element settings tabs now keep showing which tab you are on.

  - Fixed the Advanced tab failing to open on some elements.

  - Fixed missing and lowercase labels in the builder.

 

# 6.2.4

# 23-07-2026

[](#New)

  - Debug / Error Logs screen for render and builder-load failures.

  - Detects a builder stuck loading, not just one that throws an error.

  - Automatic license re-check with actionable admin notices.

  - Admin notice when JMedia is disabled, linking to Extensions to re-enable it.

  - License activation/deactivation/check calls now logged for debugging.

  - Debug / Error Logs screen shows the log file's path on disk.

[](#Security)

  - Fixed unauthenticated page creation via a bare CSRF token.

  - Fixed missing permission checks on collection rename/publish by ID.

  - Fixed page/collection creation silently overwriting an existing record.

  - Replaced the quixlogin cookie-guessing fallback with a signed, time-limited token.

[](#Improve)

  - Faster builder boot — element icons load in one request instead of dozens.

  - Faster page loads — static assets served directly instead of via PHP proxy.

  - Simplified admin toolbar cache controls into one-click clean.

  - Cache icon now shows a spinner while clearing, instead of no feedback at all.

  - Revised the "new v2 license system" notice with a clearer message and a Visit License Server button.

[](#Fix)

  - Cursor jumping in builder text fields.

  - Canvas loading overlay hidden behind builder UI.

  - Page meta description overwritten by menu item.

  - Local image URLs not resolved to absolute for OG/meta tags.

  - Twig function name collision with other extensions.

  - Advanced tab fields (CSS ID/Class, etc.) occasionally empty after cache rebuild.

  - Schema cache could corrupt under concurrent rebuilds.

  - A misleading "WebAssetManager is locked" error could mask the real failure and skip logging it.

  - Debug / Error Logs screen showed no entries even when errors were actually being logged.

  - Clear Log button did not actually clear the log file.

  - Page checkout could fail with "Argument userId must be an integer" on some hosts.

  - License activation rejected valid keys as a mismatch on any site without a manual config override.

  - Bundled JMedia sub-extensions shipping mismatched version numbers.

  - "Activate Now" / "License missing" indicators rendered in neutral colors instead of red.

  - License request/response debug log entries logged at WARNING instead of INFO.

  - Component language files not installing due to a filename mismatch in the manifest — renamed en-GB.com_quix.ini to com_quix.ini (and same for .sys.ini) to match what ships and what Joomla actually loads.

 

# 6.2.3

# 19-07-2026

[](#Improve)

  - Cross-domain copy/paste is now opt-in (Options → Cross-domain Copy/Paste, off by default). The builder no longer loads the getquix.net clipboard frame unless you enable it — this removes the Cloudflare "verify you are human" checkbox some users saw inside the builder.

  - Copy/paste within the same site now works without the external clipboard frame, using browser storage.

[](#Fix)

  - Fixed cross-domain copy/paste silently failing in Chromium-based browsers: the builder cached a reference to the clipboard frame before it finished loading, so copied elements never reached the shared clipboard and paste could hang.

 

# 6.2.2

# 16-07-2026

[](#Security)

  - Fixed an unauthenticated SQL injection in the Joomla Article element.

  - Fixed a code-execution path via the Raw HTML element (PHP tags in element content are now neutralised).

  - Fixed a path traversal / arbitrary file read in the Form element submission handler.

  - Fixed stored cross-site scripting (XSS) through the icon field, including inline SVG.

  - Fixed the Advanced → CSS ID / Class fields not being sanitised on render (the sanitiser read the wrong data path), which allowed CSS selector and class-attribute breakout on a saved page.

  - Added an explicit permission check to the admin media manager endpoint.

  - Stopped reflecting internal error details in frontend AJAX responses.

  - Updated the bundled JMedia media manager: blocks executable/polyglot uploads (RCE) and remote-URL SSRF, sanitises uploaded SVG, and serves files with hardened headers to close a media-picker XSS.

[](#Improve)

  - Updating Quix now automatically clears every Quix cache — page/view cache, compiled template (Twig) cache, builder schema cache, and dynamic icon/image caches — so security fixes take effect immediately without a manual cache clear.

[](#Fix)

  - Fixed a fatal error ("Class 'Joomla\Database\ParameterType' not found") in the Joomla Article element on Joomla 3.

  - Fixed a fatal error on Joomla 6 ("Class 'Joomla\CMS\Filesystem\Folder' not found") when rendering a Quix page — the filesystem classes it used were removed in Joomla 6.

  - Fixed a fatal error on every page render caused by dead form-encryption setup in the form footer.

 

# 6.2.1

# 15-07-2026

[](#Security)

  - Security release — updating is strongly recommended for all sites.

  - Fixed an unauthenticated SQL injection in the Joomla Article element.

  - Fixed a code-execution path via the Raw HTML element (PHP tags in element content are now neutralised).

  - Fixed a path traversal / arbitrary file read in the Form element submission handler.

  - Fixed stored cross-site scripting (XSS) through the icon field, including inline SVG.

  - Added an explicit permission check to the admin media manager endpoint.

  - Stopped reflecting internal error details in frontend AJAX responses.

  - Updated the bundled JMedia media manager: blocks executable/polyglot uploads (RCE) and remote-URL SSRF, sanitises uploaded SVG, and serves files with hardened headers to close a media-picker XSS.

[](#Fix)

  - Fixed images being cropped by an over-eager aspect-ratio/object-fit rule inherited from an updated UIkit base.

  - Restored the builder loading screen, which had become invisible so the editor appeared to load on a blank page.

  - Pricing Table: reverted the forced card styling, border and default description that were applied to existing tables, while keeping the new GSAP entrance animations.

 

# 6.2.0

# 14-07-2026

[](#Security)

  - Completed a full security audit of the extension. Updating is strongly recommended.

  - Hardened all frontend API endpoints with strict permission and access checks.

  - Fixed input handling and output escaping across elements, modules, and plugins.

  - Tightened file, URL, and database query handling throughout the component.

[](#New)

  - Redesigned builder toolbar and sidebars with a cleaner, consistent look including dark mode.

  - Added device frames around the canvas with zoom support for responsive previews.

  - Added a new New Page modal and persistent custom breakpoints.

  - Redesigned the admin panel with a modern card-based layout.

[](#Fix)

  - Improved frontend performance: self-hosted GSAP loaded only when needed, and compressed asset delivery.

  - Reduced memory usage during page rendering.

  - Fixed compatibility issues with Joomla 5.3+ and the Atom template on Joomla 5/6.

  - Fixed builder failing to load all elements when a single element has a broken configuration (surfaced as a "WebAssetManager is locked" error), and made element loading faster by no longer rebuilding the full schema cache on every request.

 

# 6.1.0

# 17-06-2026

[](#New)

  - Added a new Block Number element with full configuration options, styles, and scripts.

  - Added a new Image Content element.

  - Added a new Clients element with configuration.

  - Added a new Instagram Feed element with configuration

 

# 6.0.4

# 07-06-2026

[](#New)

  - Added a new global setting to disable CSS preconnect.

[](#Fix)

  - Fixed the text-shadow not working on any element issue.

 

# 6.0.3

# 04-06-2026

[](#Fix)

  - fix the admin quix menu not opening issue.

 

# 6.0.2

# 21-05-2026

[](#Fix)

  - resolve JPATH_COMPONENT_ADMINISTRATOR conflict for Joomla 6.

 

# 6.0.1

# 14-05-2026

[](#Fix)

  - Fixed the JMedia not loading in Joomla 6 issue.

  - Fixed the icon-list styling issue.

 

# 6.0.0

# 30-04-2026

[](#New)

  - Added Joomla 6 support.

  - Integrates GSAP as a new animation engine across 5 elements: `Heading, Text, Icon List, Image, Button`.

  - Adds a shared gsap-animation.js script registered in Joomla's asset system.

  - Each element gets new config options (duration, delay, easing, scroll trigger)

  - Adds a magnetic cursor effect for the Button element

  - Adds an image reveal animation for Image