XSS in Joomshaper.com Helix Ultimate Extension For Joomla

CVE-2026-57829

The Joomla extension Helix Ultimate is vulnerable to an unauthenticated stored XSS.

Vulnerability class: XSS (Cross-Site Scripting)

Affected products

Joomshaper.com Helix Ultimate Extension For Joomla — versions 1.0-2.2.6

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

Is4yev/CVE-2026-57829

References

security@joomla.org (product)

Frequently asked questions

What is CVE-2026-57829?: CVE-2026-57829 is a vulnerability in Joomshaper.com Helix Ultimate Extension For Joomla, classified under Cross-site Scripting. Published 2026-07-13.
Is CVE-2026-57829 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.