Skip to content

Exploited: 178

LatestCVE-2026-115731 — Report Deserialization Code Execution

8.6

CVE-2026-105602Verify fix

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

joomshaper.com Helix Ultimate extension for Joomla2026-11-02 13:19 UTC1 min readRead in

Summary

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

Remediation

Inventory every joomshaper.com Helix Ultimate extension for Joomla deployment, including staging.
No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

Referencehttps://www.joomshaper.com/joomla-templates/helixultimate