Vulnerabilidades do Regularlabs.com Modals Pro extension for Joomla
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Regularlabs.com Modals Pro extension for Joomla: 2 registro(s), com versões afetadas e correções.
CVE-2026-88853
Alta · 7.5
CWE-79 14/09/2026
Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0
Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open and on-closed. Affected versions do not distinguish trusted extension configuration from event code supplied in ordinary article content. A lower-privileged author can therefore use a documented executable feature which should be reserved for trusted authors.
CVE-2026-65713
Média · 6.5
CWE-22 23/07/2026
Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension
Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories.