CVE-2026-57829

The Helix Ultimate Joomla extension, prior to version 2.2.7, is susceptible to unauthenticated stored cross-site scripting (XSS) vulnerabilities, allowing attackers to inject malicious scripts that can execute in the context of users accessing the affected site. This could lead to data theft, session hijacking, or defacement of the website. Joomla site administrators using this extension should prioritize updating to the latest version to mitigate potential exploitation risks.