CVE-2026-85195
Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article author's trust level. The plugin syntax survives Joomla's normal Author content filter because the executable HTML is generated later.
| CWE | CWE-79 |
| Vendor | regularlabs.com |
| Product | articles anywhere (free, pro) extension for joomla |
| Published | Sep 14, 2026 |
| Last Updated | Sep 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for regularlabs.com articles anywhere (free, pro) extension for joomla
Be the first to know when new unknown vulnerabilities affecting regularlabs.com articles anywhere (free, pro) extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
regularlabs.com / Articles Anywhere (Free, Pro) extension for Joomla
14.0.0-19.0.6