CVE-2026-74253 — Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0

CVE-2026-74253

Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 PUBLISHED

Description (CNA)

Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where that code originated.

Affected (CNA)

Vendor / product	Versions
regularlabs.com / Sourcerer extension for Joomla	affected 1.0.0-15.0.0

CWE

CWE-94

References

https://regularlabs.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.