CVE-2026-105602

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-105602 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

EUVD-2026-115176

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-105602

The Helix Ultimate Joomla extension by joomshaper.com is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.2.11 . The vulnerability exists within the Mega Menu Badge Text component, where improper neutralization of input allows for malicious script execution. This issue is as...

CVE-2026-105602 Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-105602: joomshaper.com Helix Ultimate extension for Joomla: Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate <…

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

PT-2026-135424

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting XSS in Mega Menu Badge Text in Helix Ultimate 2.2.11...

CVE-2026-106161

In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the Badge text method renders string values as raw HTML without encoding, including values supplied through text binding. An attacker who can modify data bound to a Badge can supply HTML containing even...