SSRF in Regularlabs.com Articles Anywhere Pro Extension For Joomla
CVE-2026-64799
Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This could result in SSRF, internal-data access or writing attacker-cont…
Vulnerability class: SSRF (Server-Side Request Forgery)
Affected products
- Regularlabs.com Articles Anywhere Pro Extension For Joomla — versions 1.0.0-18.0.2
- Regularlabs.com Users Anywhere Pro Extension For Joomla — versions 1.0.0-1.2.7
Weakness classification (CWE)
References
- security@joomla.org (product)