EUVD-2026-47913
GHSA-9g7h-rhcq-6c63
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Shortcut configuration in Joomla requires at minimum a basic authenticated role (PR:L); Changed Scope reflects XSS execution in victim browser; no availability impact.
Primary rating from Vendor (Joomla).
CVSS VectorVendor: Joomla
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Lifecycle Timeline
2DescriptionCVE.org
Shortcut configuration accepted arbitrary inline JavaScript.
AnalysisAI
Cross-site scripting in the Keyboard Shortcuts extension for Joomla (versions 1.0.0-3.2.5) by Regular Labs allows injection of arbitrary JavaScript via the shortcut configuration interface, executing in the browser context of any user who subsequently triggers the affected shortcut. The Changed Scope (S:C) in the CVSS vector confirms script execution crosses into the victim's session context, enabling session hijacking, credential theft, or unauthorized site actions. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires: (1) the Keyboard Shortcuts extension for Joomla versions 1.0.0-3.2.5 installed and active on the target site; (2) the attacker must have sufficient Joomla role privileges to access and save the shortcut configuration interface - the provided CVSS PR:N rating is potentially inconsistent with a configuration-gated feature and should be verified with the vendor before relying on it for risk decisions; (3) a victim user must actively trigger the configured keyboard shortcut while browsing the site (UI:R). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS score of 6.1 (Medium) with vector AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N reflects network-reachable, low-complexity exploitation with Changed Scope and limited confidentiality and integrity impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with contributor-level or higher access to a Joomla site running the affected extension configures a keyboard shortcut with a malicious inline JavaScript payload - for example, a fetch call exfiltrating the current user's session cookie to an attacker-controlled server. When a higher-privileged user such as a site administrator triggers that shortcut while authenticated, the injected script executes in their browser, allowing the attacker to steal the admin session token and escalate privileges. … |
| Remediation | No exact patched version number is independently confirmed in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today