CVE-2026-85196
Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is used. Joomla's string input filter does not make the same value safe for HTML text, an HTML attribute and a URL. A visitor-controlled request value can therefore become an executable URL or a new event attribute in output configured by a site author.
| CWE | CWE-79 |
| Vendor | regularlabs.com |
| Product | articles anywhere (pro) extension for joomla |
| Published | Sep 14, 2026 |
| Last Updated | Sep 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for regularlabs.com articles anywhere (pro) extension for joomla
Be the first to know when new unknown vulnerabilities affecting regularlabs.com articles anywhere (pro) extension for joomla are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
regularlabs.com / Articles Anywhere (Pro) extension for Joomla
8.4.0-19.0.6
regularlabs.com / Users Anywhere (Pro) extension for Joomla
1.0.0-2.0.6