CVE-2026-105602

The Helix Ultimate Joomla extension by joomshaper.com is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 2.2.11 . The vulnerability exists within the Mega Menu Badge Text component, where improper neutralization of input allows for malicious script execution. This issue is as...