CVE-2026-64795 PUBLISHED

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions

Assigner: Joomla
Reserved: 20.07.2026 Published: 22.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

Product Status

Vendor regularlabs.com
Product Modals extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-15.0.0 is affected
Vendor regularlabs.com
Product Tooltips extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-9.4.7 is affected
Vendor regularlabs.com
Product Articles Anywhere Pro extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-18.0.2 is affected
Vendor regularlabs.com
Product Users Anywhere Pro extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-1.2.7 is affected
Vendor regularlabs.com
Product Modules Anywhere Pro extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-8.4.1 is affected

References

Problem Types

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE