Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-64795 Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript tha… https://www.cve.org/CVERecord?id=CVE-2026-64795
Post summary
The entry outlines an XSS‑style flaw in CVE‑2026‑64795 where tag‑provided custom HTML can execute unsafe JavaScript, but it provides no PoC, exploit code, active use evidence, or patch information.
🚨*CVE* CVE-2026-64795 Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript tha… https://www.cve.org/CVERecord?id=CVE-2026-64795 ----- Traducción: CVE-2026-64795 Eti… http://infoflow.cloud`
Post summary
This post briefly announces CVE‑2026‑64795, describing how custom HTML and module overrides can lead to unsafe markup and JavaScript injection, but it provides no evidence of exploits, patches, or active use.