What is the CVSS score of CVE-2026-64795?

CVE-2026-64795 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.2%.

Modals Extension For Joomla CVE-2026-64795

EUVD-2026-47808 MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2026-07-22 Joomla

XSS Modals Extension For Joomla Tooltips Extension For Joomla Articles Anywhere Pro Extension For Joomla Users Anywhere Pro Extension For Joomla Modules Anywhere Pro Extension For Joomla Regularlabs Com

5.4

CVSS 3.1 · Vendor: Joomla

Severity by source

Vendor (Joomla) PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Primary rating from Vendor (Joomla) · only source for this CVE.

CVSS VectorVendor: Joomla

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 14:24 vuln.today

CVSS changed

Jul 27, 2026 - 14:22 NVD

5.4 (MEDIUM)

CVE Published

Jul 22, 2026 - 20:41 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

AnalysisAI

Stored cross-site scripting (XSS) in multiple Regular Labs Joomla extensions allows an authenticated content author to inject arbitrary JavaScript. The script executes in visitors' browsers, potentially stealing session tokens or performing actions on their behalf. No active exploitation or public exploit code has been identified; EPSS score indicates very low likelihood of exploitation.