Veille CVE

Recherche « regularlabs.com Users Anywhere extension for Joomla »

7 CVE

Critique 0 Élevée 4 Moyenne 3 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « regularlabs.com Users Anywhere extension for Joomla » ✕
  1. CVE-2026-85196 5.3 Moyenne

    regularlabs.com Articles Anywhere (Pro) extension for Joomla · regularlabs.com Users Anywhere (Pro) extension for Joomla

    Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is used. Joomla's string input filter does not make the same value safe for HTML text, an HTML attribute and a URL. A visitor-controlled request value can therefore become an executable URL or a new event attribute in output configured by a site author.

  2. CVE-2026-65757 8.1 Élevée

    regularlabs.com Modules Anywhere extension for Joomla

    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens.

  3. CVE-2026-65755 7.5 Élevée

    regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Users Anywhere extension for Joomla

    Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially exposing content after it should become unavailable.

  4. CVE-2026-64799 7.5 Élevée

    regularlabs.com Articles Anywhere Pro extension for Joomla · regularlabs.com Users Anywhere Pro extension for Joomla

    Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder.

  5. CVE-2026-64795 5.4 Moyenne

    regularlabs.com Modals extension for Joomla · regularlabs.com Tooltips extension for Joomla · regularlabs.com Articles Anywhere Pro extension for Joomla · regularlabs.com Users Anywhere Pro extension for Joomla

    Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.

  6. CVE-2026-64794 6.5 Moyenne

    regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Users Anywhere extension for Joomla

    Joomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions - User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or restricted contact details.

  7. CVE-2026-63265 8.0 Élevée

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Articles Field extension for Joomla · regularlabs.com Better Frontend Link extension for Joomla

    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.