CyberRota Analysis
AI-GeneratedThe Joomla Extension from joomshaper.com, specifically Helix Ultimate versions prior to 2.2.10, is vulnerable to an open redirect flaw due to its acceptance of arbitrary Base64 encoded return parameters without proper validation of the target URL. This vulnerability could allow attackers to redirect users to malicious external sites, potentially leading to phishing or other malicious activities. Joomla administrators and web developers using this extension should prioritize updating to the latest version to mitigate the risk.
Original NVD Description
Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate < 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal.