Approved changes feed: RSS · Atom

cpe:2.3:a:regularlabs.com:users_anywhere_pro_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRegularlabs.Com (738da9fd-b178-52c4-917b-e11dbc67f76c)
ProductUsers Anywhere Pro Extension For Joomla (3ba5079d-47d6-5897-9f87-bc98019ce698)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-64799 vulnerable 2026-07-29 01:06:19.862547 Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions
Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-controlled files into a web-accessible folder.
Published: 2026-07-23T09:11:12.311Z
Updated: 2026-07-28T05:32:38.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-64795 vulnerable 2026-07-29 01:06:19.860076 Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions
Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in various Regular Labs extensions - Tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values could execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.
Published: 2026-07-22T20:41:19.007Z
Updated: 2026-07-27T13:29:26.815Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.