Vulnerabilidades do Regularlabs.com Modals extension for Joomla
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Regularlabs.com Modals extension for Joomla: 2 registro(s), com versões afetadas e correções.
CVE-2026-64795
Média · 5.4
CWE-79 22/07/2026
Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions
Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.
CVE-2026-63265
Alta · 8.0
CWE-284 22/07/2026
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.