CVE-2026-64795 — Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions

Description (CNA)

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

Affected (CNA)

Vendor / product	Versions
regularlabs.com / Modals extension for Joomla	affected 1.0.0-15.0.0
regularlabs.com / Tooltips extension for Joomla	affected 1.0.0-9.4.7
regularlabs.com / Articles Anywhere Pro extension for Joomla	affected 1.0.0-18.0.2
regularlabs.com / Users Anywhere Pro extension for Joomla	affected 1.0.0-1.2.7
regularlabs.com / Modules Anywhere Pro extension for Joomla	affected 1.0.0-8.4.1

CWE

CWE-79

References

https://regularlabs.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.