Skip to content
OpenAdvisories
Medium · 5.4 CVE-2026-64795 EUVD-2026-47808GHSA-hmw9-h2r2-26m2

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions

Published Jul 22, 2026 · Updated Jul 27, 2026 · Assigned by Joomla

Description

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

Affected products

VendorProductAffectedFixed
regularlabs.com Modals extension for Joomla 1.0.0-15.0.0 —
regularlabs.com Tooltips extension for Joomla 1.0.0-9.4.7 —
regularlabs.com Articles Anywhere Pro extension for Joomla 1.0.0-18.0.2 —
regularlabs.com Users Anywhere Pro extension for Joomla 1.0.0-1.2.7 —
regularlabs.com Modules Anywhere Pro extension for Joomla 1.0.0-8.4.1 —

References