CVE-2026-65946

The Joomla Extension from rolandd.com is vulnerable to cross-site scripting (XSS) attacks through AJAX endpoint handlers in versions prior to 9.11.0. This vulnerability could allow an attacker to execute arbitrary scripts in the context of a user's session, potentially leading to data theft or session hijacking. Web administrators using this extension should prioritize updating to the latest version to mitigate the risk.