Good morning,
I am involved in this security issue with the custom-icon attack.
I have downloaded the latest plugins of helix:
plg_ajax_helix_3_1_2.zip
plg_system_helix_3_1_2.zip
and I am trying to manually install them on several websites, from J4 to J5, various versions.
Sometimes J accept the plugin, sometimes it answers: it is not possible to upload that packets.
Anybody has an answer?