← Back

Helix3

helix3

Vendor: Ollyo • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ollyo
1Helix3
Jun 30, 2026
Jun 29, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters.