Articles Anywhere extension for Joomla vulnerabilities
5 known vulnerabilities in Articles Anywhere extension for Joomla from Regularlabs.com. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.9 High severity
Sourcerer Free extension for Joomla: Improper Control of Generation of Code
Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles Anywhere extension < 20.1.1 - Sourcerer can restrict PHP in articles according to article-author trust; the exact creator and last-editor rul
- 7.5 High severity
Articles Anywhere extension for Joomla: Use of Cache Containing Sensitive Information
Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or
- 9.1 Critical severity
Articles Anywhere extension for Joomla: Improper Access Control
Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content autho
- 7.5 High severity
Articles Anywhere extension for Joomla: Use of Cache Containing Sensitive Information
Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted o
- 8.0 High severity
Advanced Module Manager extension for Joomla: Improper Access Control
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions