Joomla Helix3 <= 3.1.1 - Unauthenticated Arbitrary File Write (CVE-2026-49049)

CVE-2026-49049 in JoomShaper Helix3 = 3.1.1: unauthenticated file write via comajax helix3 save path traversal in layoutName, arbitrary file delete via remove, and template parameter overwrite via import Helix3 v3.x. The save action always appends .json — no reliable shell; use for authorized fil...