CVE-2026-65756

The Keyboard Shortcuts extension for Joomla is vulnerable to a cross-site scripting (XSS) attack due to its acceptance of arbitrary inline JavaScript in shortcut configurations. This flaw could allow attackers to execute malicious scripts in the context of a user's session, potentially leading to data theft or session hijacking. Joomla administrators and users of the affected extension should prioritize patching or mitigating this vulnerability to protect their applications from exploitation.