Users Anywhere (Pro) Extension For Joomla
Approved changes feed: RSS · Atom
cpe:2.3:a:regularlabs.com:users_anywhere_(pro)_extension_for_joomla:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Regularlabs.Com (738da9fd-b178-52c4-917b-e11dbc67f76c) |
|---|---|
| Product | Users Anywhere (Pro) Extension For Joomla (aeaa11f9-a8f3-5851-b175-2e1b76e30774) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-85196 |
vulnerable | 2026-09-16 04:33:08.256523 |
Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0
Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is used. Joomla's string input filter does not make the same value safe for HTML text, an HTML attribute and a URL. A visitor-controlled request value can therefore become an executable URL or a new event attribute in output configured by a site author.
Published: 2026-09-14T06:21:18.710Z
Updated: 2026-09-14T11:32:18.652Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.