CVE-2026-64795: Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions

Published Jul 22, 2026

Updated

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

Affected Software

1 affected component

Regular Labs Regular Labs Joomla extensions

Event History

Jul 22, 2026

CVE Published

via MITRE·08:41 PM

Data Sourced

via MITRE·08:41 PM

DescriptionWeakness

Data Sourced

via NVD·09:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-64795?

CVE-2026-64795 has a risk rating of 33, indicating a significant vulnerability related to XSS in Joomla extensions.

How do I fix CVE-2026-64795?

To mitigate CVE-2026-64795, update the affected Regular Labs extensions to the latest patched version provided by the developer.

What are the implications of CVE-2026-64795 for web users?

CVE-2026-64795 allows content authors to inject malicious JavaScript, potentially impacting the security and privacy of website visitors.

Which Joomla extensions are affected by CVE-2026-64795?

CVE-2026-64795 affects various Regular Labs extensions that process tag-provided inputs, such as custom HTML and module content overrides.

When was CVE-2026-64795 published?

CVE-2026-64795 was published on July 22, 2026.