Approved changes feed: RSS · Atom

cpe:2.3:a:joomshaper.com:helix3_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJoomshaper.Com (5a65d801-d404-5f04-86ed-c3e2990781fb)
ProductHelix3 Extension For Joomla (0aedf304-3321-5e70-846a-36f22e4e3b3b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-49049 vulnerable 2026-07-29 00:57:44.874634 Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler
The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters.
Published: 2026-06-29T14:34:07.407Z
Updated: 2026-08-12T13:58:11.940Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.