All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2026-74253
CRITICALpublished 2026-08-17 18:18 UTC · 15 hours ago
10.0
CVSS / 10
// description
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 14.0.0 - Regular Labs Sourcerer before 14.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where that code originated.
// weaknesses (CWE)
- CWE-94