CVE-2026-64795: Regularlabs.com Articles Anywhere Pro Extension For Joomla

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

Affected products

• Regularlabs.com Articles Anywhere Pro Extension For Joomla: version 1.0.0-18.0.2 only
• Regularlabs.com Modals Extension For Joomla: version 1.0.0-15.0.0 only
• Regularlabs.com Modules Anywhere Pro Extension For Joomla: version 1.0.0-8.4.1 only
• Regularlabs.com Tooltips Extension For Joomla: version 1.0.0-9.4.7 only
• Regularlabs.com Users Anywhere Pro Extension For Joomla: version 1.0.0-1.2.7 only

Published 2026-07-22. Last modified 2026-07-27.