Vulnerabilidades do Regularlabs.com Users Anywhere Pro extension for Joomla
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Regularlabs.com Users Anywhere Pro extension for Joomla: 3 registro(s), com versões afetadas e correções.
CVE-2026-85196
Média · 5.3
CWE-79 14/09/2026
Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0
Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is used. Joomla's string input filter does not make the same value safe for HTML text, an HTML attribute and a URL. A visitor-controlled request value can therefore become an executable URL or a new event attribute in output configured by a site author.
CVE-2026-64799
Alta · 7.5
CWE-918 23/07/2026
Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions
Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder.
CVE-2026-64795
Média · 5.4
CWE-79 22/07/2026
Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions
Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.