CVE-2026-65756 PUBLISHED

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension

Assigner: Joomla
Reserved: 22.07.2026 Published: 23.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extension - Shortcut configuration accepted arbitrary inline JavaScript.

Product Status

Vendor regularlabs.com
Product Keyboard Shortcuts extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-3.2.5 is affected

References

Problem Types

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE

Impacts

  • CAPEC-126 Path Traversal