Reflected XSS Vulnerability in Regular Labs Joomla Extensions

CVE-2026-85196

What is CVE-2026-85196?

The Regular Labs Joomla extensions, namely Articles Anywhere and Users Anywhere, exhibit a vulnerability where they fail to properly sanitize user input, leading to reflected XSS attacks. Specifically, these extensions return values from request-input data tags without implementing necessary security measures for different contexts such as HTML text, HTML attributes, and URLs. This flaw allows malicious actors to inject executable URLs or manipulate event attributes on a website. As a result, any site author using these extensions without adequate remediation may inadvertently expose their users to significant security risks.

References