CVE Catalog
CVE-2026-74253
CriticalCVSS 10.0Summary
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 14.0.0 - Regular Labs Sourcerer before 14.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where that code originated.
Risk Assessment
An unauthenticated attacker could execute arbitrary code on the server, potentially leading to full system compromise.
Recommendation
Upgrade Sourcerer to version 14.0.0 or later.
Original NVD description (English source)
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 14.0.0 - Regular Labs Sourcerer before 14.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where that code originated.