CVE-2026-103419

Published 2 November 2026 · tracked since 2 November 2026

Description

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-120428 MEDIUM 6.1
• CVE-2026-120318 HIGH 7.2
• CVE-2026-109083
• CVE-2026-110535
• CVE-2026-111959
• CVE-2026-113511
• CVE-2026-113687
• CVE-2026-114364
• CVE-2026-102802
• CVE-2026-103420

→ Open the live CVE board · all tools