CVE Intelligence

Regularlabs.com Modals (Free, Pro) extension for Joomla vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Regularlabs.com Modals (Free, Pro) extension for Joomla: 1 record(s), with affected versions and fixes.

CVE-2026-85189 High · 7.5 CWE-79 Sep 14, 2026
Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0
Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0 - Modals treats a destination using an executable browser URL scheme as an ordinary modal URL. The value can reach both the generated link and the iframe-loading path. Authored content can consequently become JavaScript in a visitor's browser without using Modals' separate Pro JavaScript Events feature.