RCE in Regularlabs.com Sourcerer Extension For Joomla
CVE-2026-74253
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 14.0.0 - Regular Labs Sourcerer before 14.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where that code originated.
Vulnerability class: RCE (Remote Code Execution)
Affected products
- Regularlabs.com Sourcerer Extension For Joomla — versions 1.0.0-13.1.1
Weakness classification (CWE)
References
- security@joomla.org (product)