CVE-2026-64795

CVE-2026-64795: Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions

Vendor Regularlabs.com
Product Modals extension for Joomla
Weakness CWE-79 · XSS
Published July 22, 2026
Last update July 27, 2026
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

Key dates

02Disclosure timeline

July 22, 2026 CVE published
July 27, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-61961 WordPress EmbedPress plugin <= 4.5.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-28082 WordPress JetEngine plugin <= 3.8.13.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-66688 WordPress Ultimate Addons for Elementor plugin <= 1.45.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-65544 WordPress Super Socializer plugin <= 7.14.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-66705 WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability