CVE-2026-103419 | Joomshaper Helix Ultimate Extension up to 2.2.10 Media Picker cross site scripting

A vulnerability, which was classified as problematic, has been found in Joomshaper Helix Ultimate Extension up to 2.2.10. This issue affects some unknown processing of the component Media Picker. This manipulation causes cross site scripting.

The identification of this vulnerability is CVE-2026-103419. It is possible to initiate the attack remotely. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More