High severityNVD Advisory· Published Sep 14, 2026· Updated Sep 14, 2026
CVE-2026-85195
CVE-2026-85195
Description
Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article author's trust level. The plugin syntax survives Joomla's normal Author content filter because the executable HTML is generated later.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <20.0.0
- Range: <20.0.0
- Range: <20.0.0
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.