CVE-2026-65713 - Vulnerability Details - OpenCVE

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00157.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Regularlabs.com	Modals Pro Extension For Joomla

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Regularlabs.com	Modals Pro Extension For Joomla

References

Link	Providers
https://regularlabs.com/

History

Fri, 24 Jul 2026 20:30:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 23 Jul 2026 21:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Regularlabs.com Regularlabs.com modals Pro Extension For Joomla
Vendors & Products		Regularlabs.com Regularlabs.com modals Pro Extension For Joomla

Thu, 23 Jul 2026 15:45:00 +0000

Type	Values Removed	Values Added
Description	Modals gallery paths could enumerate unintended directories.	Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories.

Thu, 23 Jul 2026 09:30:00 +0000

Type	Values Removed	Values Added
Description		Modals gallery paths could enumerate unintended directories.
Title		Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension
Weaknesses		CWE-22
References		https://regularlabs.com/

MITRE

Status: PUBLISHED

Assigner: Joomla

Published: 2026-07-23T09:15:13.463Z

Updated: 2026-07-25T05:35:22.795Z

Reserved: 2026-07-22T20:27:32.366Z

Link: CVE-2026-65713

Vulnrichment

Updated: 2026-07-24T19:38:19.054Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-07-23T20:11:06Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-65713", "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586", "state": "PUBLISHED", "assignerShortName": "Joomla", "dateReserved": "2026-07-22T20:27:32.366Z", "datePublished": "2026-07-23T09:15:13.463Z", "dateUpdated": "2026-07-25T05:35:22.795Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Modals Pro extension for Joomla", "vendor": "regularlabs.com", "versions": [{"status": "affected", "version": "1.0.0-15.0.0"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories."}], "value": "Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories."}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586", "shortName": "Joomla", "dateUpdated": "2026-07-25T05:35:22.795Z"}, "references": [{"tags": ["product"], "url": "https://regularlabs.com/"}], "source": {"discovery": "UNKNOWN"}, "title": "Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-07-24T19:38:00.689453Z", "id": "CVE-2026-65713", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-24T19:38:23.960Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-65713", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-24T19:38:00.689453Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-24T19:38:19.054Z"}}], "cna": {"title": "Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "affected": [{"vendor": "regularlabs.com", "product": "Modals Pro extension for Joomla", "versions": [{"status": "affected", "version": "1.0.0-15.0.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://regularlabs.com/", "tags": ["product"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories.", "supportingMedia": [{"type": "text/html", "value": "Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory"}]}], "providerMetadata": {"orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586", "shortName": "Joomla", "dateUpdated": "2026-07-25T05:35:22.795Z"}}}, "cveMetadata": {"cveId": "CVE-2026-65713", "state": "PUBLISHED", "dateUpdated": "2026-07-25T05:35:22.795Z", "dateReserved": "2026-07-22T20:27:32.366Z", "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586", "datePublished": "2026-07-23T09:15:13.463Z", "assignerShortName": "Joomla"}, "dataVersion": "5.2"}