Veille CVE

Recherche « regularlabs.com Articles Anywhere extension for Joomla »

9 CVE

Critique 1 Élevée 5 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « regularlabs.com Articles Anywhere extension for Joomla » ✕
  1. CVE-2026-85196 5.3 Moyenne

    regularlabs.com Articles Anywhere (Pro) extension for Joomla · regularlabs.com Users Anywhere (Pro) extension for Joomla

    Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is used. Joomla's string input filter does not make the same value safe for HTML text, an HTML attribute and a URL. A visitor-controlled request value can therefore become an executable URL or a new event attribute in output configured by a site author.

  2. CVE-2026-85195 7.5 Élevée

    regularlabs.com Articles Anywhere (Free, Pro) extension for Joomla

    Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article author's trust level. The plugin syntax survives Joomla's normal Author content filter because the executable HTML is generated later.

  3. CVE-2026-65755 7.5 Élevée

    regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Users Anywhere extension for Joomla

    Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable.

  4. CVE-2026-64799 7.5 Élevée

    regularlabs.com Articles Anywhere Pro extension for Joomla · regularlabs.com Users Anywhere Pro extension for Joomla

    Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder.

  5. CVE-2026-64795 5.4 Moyenne

    regularlabs.com Modals extension for Joomla · regularlabs.com Tooltips extension for Joomla · regularlabs.com Articles Anywhere Pro extension for Joomla · regularlabs.com Users Anywhere Pro extension for Joomla

    Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

  6. CVE-2026-64794 6.5 Moyenne

    regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Users Anywhere extension for Joomla

    Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or restricted contact details.

  7. CVE-2026-64793 9.1 Critique

    regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Modules Anywhere extension for Joomla

    Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby expose content to visitors who lacked the required access.

  8. CVE-2026-64792 7.5 Élevée

    regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Conditional Content extension for Joomla · regularlabs.com Modules Anywhere extension for Joomla · regularlabs.com ReReplacer extension for Joomla

    Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.

  9. CVE-2026-63265 8.0 Élevée

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Articles Field extension for Joomla · regularlabs.com Better Frontend Link extension for Joomla

    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.