Helix Ultimate extension for Joomla vulnerabilities
3 known vulnerabilities in Helix Ultimate extension for Joomla from Joomshaper.com. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.9 High severity
Helix Ultimate extension for Joomla: Unrestricted Upload of File with Dangerous Type
Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uplo
- 8.6 High severity
Helix Ultimate extension for Joomla: Improper Neutralization of Input During Web Page Generation
Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in MegaMenu Layout Container & Embed Inputs in Helix Ultimate < 2.2.11 - Unsanitized column and item configuration values stored within the MegaMenu layout JSON were rendered without complet
- 9.1 Critical severity
Helix Ultimate extension for Joomla: Missing Authorization
Joomla Extension - joomshaper.com - Unauthenticated arbitrary file deletion in Helix Ultimate < 2.2.7 - The Joomla extension Helix Ultimate is vulnerable to an unauthenticated arbitrary file deletion.