XSS in Regularlabs.com Articles Anywhere Pro Extension For Joomla
CVE-2026-64795
Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.
Vulnerability class: XSS (Cross-Site Scripting)
Affected products
- Regularlabs.com Articles Anywhere Pro Extension For Joomla — versions 1.0.0-18.0.2
- Regularlabs.com Modals Extension For Joomla — versions 1.0.0-15.0.0
- Regularlabs.com Modules Anywhere Pro Extension For Joomla — versions 1.0.0-8.4.1
- Regularlabs.com Tooltips Extension For Joomla — versions 1.0.0-9.4.7
- Regularlabs.com Users Anywhere Pro Extension For Joomla — versions 1.0.0-1.2.7
Weakness classification (CWE)
References
- security@joomla.org (product)