CVE-2026-78077 — Joomla Extension by joomshaper.com: Stored XSS in MegaMenu Layout Container and Embed Inputs in Helix Ultimate before 2.2.10

In Helix Ultimate versions before 2.2.10, unsanitized column and item configuration values stored in the MegaMenu layout JSON were rendered without complete contextual escaping, allowing malicious HTML or JavaScript injection.