Advisories · Technology
joomshaper.com Helix Ultimate extension for Joomla.
Every CVE that names joomshaper.com Helix Ultimate extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.
- joomshaper.com Helix Ultimate extension for Joomla
- Cross-site scripting (XSS)
- CVSS 8.6 High
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.
- joomshaper.com Helix Ultimate extension for Joomla
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Joomla Extension - joomshaper.com - Broken Object-Level Authorization in Blog Image Deletion in Helix Ultimate < 2.2.10
- joomshaper.com Helix Ultimate extension for Joomla
- Broken access control
- CVSS 5.1 Medium
Joomla Extension - joomshaper.com - Broken Access Control & Missing Authorization in MegaMenu Settings in Helix Ultimate < 2.2.10
- joomshaper.com Helix Ultimate extension for Joomla
- Broken access control
- CVSS 8.9 High
Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10
- joomshaper.com Helix Ultimate extension for Joomla
- Unrestricted file upload
- CVSS 8.6 High
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.11
- joomshaper.com Helix Ultimate extension for Joomla
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10
- joomshaper.com Helix Ultimate extension for Joomla
- Open redirect
- CVSS 8.8 High
Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7
- joomshaper.com Helix Ultimate extension for Joomla
- Broken access control
- CVSS 8.7 High
Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7
- joomshaper.com Helix Ultimate extension for Joomla
- Cross-site scripting (XSS)