CVE-2026-65756 is a CWE-79 cross-site scripting vulnerability in the Keyboard Shortcuts extension for Joomla by regularlabs.com. The extension improperly neutralizes input during web page generation by accepting arbitrary inline JavaScript in the shortcut configuration. This allows an attacker to inject malicious scripts that could execute in the context of the affected web application. The vulnerability affects versions 1.0.0 through 3.2.5. No official patch or remediation level has been published as of the data provided.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript in the context of the affected Joomla site, potentially leading to information disclosure and limited integrity impact. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, and scope changed, with low confidentiality and integrity impact and no availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor regularlabs.com for updates or advisories. Until a fix is available, consider disabling or restricting the use of the Keyboard Shortcuts extension or limiting shortcut configuration capabilities to trusted administrators only.