Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools

joomshaper.com

Source -

CNA

BOS Name -

N/A

CNA CVEs -

3

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

0
Related CVEsRelated ProductsRelated AssignersReports
3Vulnerabilities found
CVE-2026-57830
Assigner-Joomla! Project
ShareView Details
Assigner-Joomla! Project
CVSS Score-8.8||HIGH
EPSS-0.24% / 15.42%
||
7 Day CHG~0.00%
Published-13 Jul, 2026 | 07:30
Updated-15 Jul, 2026 | 08:08
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.

Action-Not Available
Vendor-ollyojoomshaper.com
Product-helix_ultimateHelix Ultimate extension for Joomla
CWE ID-CWE-862
Missing Authorization
CVE-2026-57829
Assigner-Joomla! Project
ShareView Details
Assigner-Joomla! Project
CVSS Score-8.7||HIGH
EPSS-0.15% / 4.52%
||
7 Day CHG~0.00%
Published-13 Jul, 2026 | 07:28
Updated-14 Jul, 2026 | 18:22
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Helix Ultimate < 2.2.7

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS.

Action-Not Available
Vendor-ollyojoomshaper.com
Product-helix_ultimateHelix Ultimate extension for Joomla
CWE ID-CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-49049
Assigner-Joomla! Project
ShareView Details
Assigner-Joomla! Project
CVSS Score-7.5||HIGH
EPSS-0.23% / 13.50%
||
7 Day CHG~0.00%
Published-29 Jun, 2026 | 14:34
Updated-05 Jul, 2026 | 14:29
Rejected-Not Available
Known To Be Used In Ransomware Campaigns?-Not Available
KEV Added-Not Available
KEV Action Due Date-Not Available
Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters.

Action-Not Available
Vendor-ollyojoomshaper.com
Product-helix3Helix3 extension for Joomla
CWE ID-CWE-284
Improper Access Control