| Package | Affected versions | Patched versions |
|---|---|---|
| helix3 | ≥ 1.0, ≤ 3.1.1 |
The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free