Regularlabs.com Modals Pro Extension For Joomla vulnerabilities

2 CVEs affecting Regularlabs.com Modals Pro Extension For Joomla, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-88853, published 2026-09-14.

More from Regularlabs.com.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-88853, published 2026-09-14. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open…
• CVE-2026-65713, published 2026-07-23. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories.