CVE-2026-85195CWE-79cross-site-scripting

CVE-2026-85195

published September 14, 2026

CVSS
7.5
EPSS
0%
Percentile
35.0
In the wild
Unconfirmed
What it is

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article author's trust level. The plugin syntax survives Joomla's normal Author content filter because the executable HTML is generated later.

The record
Technical detail
CVSS
7.5 · NONE
CVSS v4.0
7.5 · CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/S:N/AU:N
EPSS
0.00418 · 35.0th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2026-09-14T11:17Z
References (1)
https://www.regularlabs.com/ · [email protected]
EPSS history
Timeline
  • 15 SEP 03:22Z
    EPSS moved — → 0%
    epss
  • 14 SEP 06:13Z
    Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0
    cvelistv5