CVE-2026-64794

Summary

User tags, filters and conditions allowed access to insufficiently restricted user fields. Crafted content could expose authentication-related data, raw user parameters or restricted contact details.

Affected Software

VendorProductVersion RangeStatus
regularlabs.comArticles Anywhere extension for Joomla1.0.0-18.0.2affected
regularlabs.comUsers Anywhere extension for Joomla1.0.0-1.2.7affected

Weaknesses

  • CWE-284: CWE-284 Improper Access Control

References