Description
Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0 - Modals treats a destination using an executable browser URL scheme as an ordinary modal URL. The value can reach both the generated link and the iframe-loading path. Authored content can consequently become JavaScript in a visitor's browser without using Modals' separate Pro JavaScript Events feature.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| regularlabs.com | Modals (Free, Pro) extension for Joomla | 4.0.0-16.2.0 | — |
References
- https://www.regularlabs.com/ product