https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:33:44 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-88852 <p>Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla &lt; 7.0.0, Snippets Pro extension for Joomla &lt; 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the article author&#39;s trust level. A lower-privileged author can therefore place an unsafe value into a security-sensitive position chosen by the trusted Snippet author.</p> <p>Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla &lt; 7.0.0, Snippets Pro extension for Joomla &lt; 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the article author&#39;s trust level. A lower-privileged author can therefore place an unsafe value into a security-sensitive position chosen by the trusted Snippet author.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-88852 https://vulnerability.circl.lu/vuln/ghsa-h9wr-65g5-jgq7 <p>Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla &lt; 7.0.0, Snippets Pro extension for Joomla &lt; 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the article author&#39;s trust level. A lower-privileged author can therefore place an unsafe value into a security-sensitive position chosen by the trusted Snippet author.</p> <p>Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla &lt; 7.0.0, Snippets Pro extension for Joomla &lt; 11.0.0 - Snippets substitutes variable values supplied by an article tag into saved Snippet content. The affected versions do not consider the article author&#39;s trust level. A lower-privileged author can therefore place an unsafe value into a security-sensitive position chosen by the trusted Snippet author.</p> https://vulnerability.circl.lu/vuln/ghsa-h9wr-65g5-jgq7