CVE-2026-65713 describes an improper limitation of a pathname to a restricted directory (CWE-22) in the Modals Pro extension for Joomla by regularlabs.com. The vulnerability arises from insecure path handling in the Modals gallery feature, which could allow an attacker to enumerate directories beyond the intended gallery paths. This could lead to information disclosure of directory contents. The vulnerability affects versions 1.0.0 through 15.0.0. No known exploits are reported in the wild, and no official remediation or patch has been published as of the data provided.

Successful exploitation could allow an attacker to enumerate unintended directories on the server hosting the Joomla Modals Pro extension, potentially disclosing sensitive directory information. The CVSS score of 6.5 reflects a medium impact with confidentiality and integrity impacts rated low, and no impact on availability. There is no indication of privilege escalation or remote code execution from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor regularlabs.com and Joomla security advisories for updates. No vendor-provided temporary mitigations or workarounds are currently documented.