New CVE: CVE-2026-102801 — joomla! (MEDIUM, 5.1)
Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere extension for Joomla < 3.0.1 - An administrator can disable output of user email addresses or usernames in Users Anywhere. In affected code, attributes supplied inside a {user} or [email] / [username] tag can change those plugin settings… [MEDIUM]
https://nvd.nist.gov/vuln/detail/CVE-2026-102801