Regularlabs.com · weakness class

Cross-site Scripting

11 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0CVE-2026-85196regularlabs.com · CVSS 5.3 · 0.4% likely
CWE-79
Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0CVE-2026-88853regularlabs.com · CVSS 7.5 · 0.4% likely
CWE-79
Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0CVE-2026-88852regularlabs.com · CVSS 7.5 · 0.4% likely
CWE-79
Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0CVE-2026-85195regularlabs.com · CVSS 7.5 · 0.4% likely
CWE-79
Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0CVE-2026-85191regularlabs.com · CVSS 7.5 · 0.4% likely
CWE-79
Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5CVE-2026-85190regularlabs.com · CVSS 7.5 · 0.4% likely
CWE-79
Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0CVE-2026-85189regularlabs.com · CVSS 7.5 · 0.4% likely
CWE-79
Joomla Extension - regularlabs.com - XSS vector in Keyboard Shortcuts extensionCVE-2026-65756regularlabs.com · CVSS 6.1 · 0.3% likely
CWE-79
Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions managerCVE-2026-63281regularlabs.com · CVSS 4.8 · 0.2% likely
CWE-79
Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensionsCVE-2026-64795regularlabs.com · CVSS 5.4 · 0.2% likely
CWE-79
Joomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.0CVE-2026-100751regularlabs.com · CVSS 7.5 · 0.2% likely
CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.