Skip to content

Exploited: 178

LatestCVE-2026-115731 — Report Deserialization Code Execution

8.6

CVE-2026-103419Verify fix

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.

joomshaper.com Helix Ultimate extension for Joomla2026-11-02 13:24 UTC1 min readRead in

Summary

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.

Remediation

Inventory every joomshaper.com Helix Ultimate extension for Joomla deployment, including staging.
No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

Referencehttps://www.joomshaper.com/joomla-templates/helixultimate