CVE-2026-105602

Published 2 November 2026 · tracked since 2 November 2026

Description

Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate < 2.2.11.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-58925
• CVE-2026-58915
• CVE-2026-49903
• CVE-2026-49906 HIGH 7.8
• CVE-2026-59042 HIGH 7.4
• CVE-2026-59046
• CVE-2026-59006
• CVE-2026-58985
• CVE-2026-58886
• CVE-2026-58934 HIGH 8.4

→ Open the live CVE board · all tools