Security Advisory

CVE-2026-85189

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-14 06:17:35

Last updated 2026-09-15 04:45:12

Assigner Joomla

CVSS score 7.5

State PUBLISHED

Description

Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0 - Modals treats a destination using an executable browser URL scheme as an ordinary modal URL. The value can reach both the generated link and the iframe-loading path. Authored content can consequently become JavaScript in a visitor's browser without using Modals' separate Pro JavaScript Events feature.

← Browse all CVEs View on cve.org ↗