joomshaper.com Helix Ultimate extension for Joomla

• CVE-2026-103419 High 8.6 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11. 0.4%
• CVE-2026-105602 High 8.6 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11. 0.4%
• CVE-2026-78075 Medium 5.1 Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10 0.4%
• CVE-2026-78076 Medium 5.1 Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10 0.4%
• CVE-2026-78078 High 8.9 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 0.4%
• CVE-2026-78077 High 8.6 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.11 0.4%
• CVE-2026-78079 Medium 5.3 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 0.4%
• CVE-2026-57830 High 8.8 Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 0.5%
• CVE-2026-57829 High 8.7 Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7 0.3%