CVE-2026-88852
Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the article author's trust level. A lower-privileged author can therefore place an unsafe value into a security-sensitive position chosen by the trusted Snippet author.
| CWE | CWE-79 |
| Vendor | regularlabs.com |
| Product | snippets (free) extension for joomla |
| Published | Sep 14, 2026 |
| Last Updated | Sep 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for regularlabs.com snippets (free) extension for joomla
Be the first to know when new unknown vulnerabilities affecting regularlabs.com snippets (free) extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
regularlabs.com / Snippets (Free) extension for Joomla
1.0.0-6.9.4
regularlabs.com / Snippets (Pro) extension for Joomla
1.0.0-10.0.6