Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    10 vulnerabilities found for Conditional Content extension for Joomla by regularlabs.com

    CVE-2026-64792 (GCVE-0-2026-64792)

    Vulnerability from nvd – Published: 2026-07-22 20:40 – Updated: 2026-07-23 14:56
    VLAI
    Title
    Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions
    Summary
    Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
    Severity
    No CVSS data available.
    CWE
    • CWE-524 - Use of Cache Containing Sensitive Information
    Assigner
    References
    URL Tags
    https://regularlabs.com/ product
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Articles Anywhere extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-18.0.2"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Conditional Content extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Modules Anywhere extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-8.4.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ReReplacer extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.3"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Sourcerer extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-12.2.8"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Tabs \u0026 Accordions Pro extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-2.5.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Snippets Pro extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-9.3.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator\u2019s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors."
            }
          ],
          "value": "Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator\u2019s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-524",
              "description": "CWE-524 Use of Cache Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T14:56:09.119Z",
        "orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
        "shortName": "Joomla"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://regularlabs.com/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
    "assignerShortName": "Joomla",
    "cveId": "CVE-2026-64792",
    "datePublished": "2026-07-22T20:40:58.877Z",
    "dateReserved": "2026-07-20T18:16:31.592Z",
    "dateUpdated": "2026-07-23T14:56:09.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-63683 (GCVE-0-2026-63683)

    Vulnerability from nvd – Published: 2026-07-22 20:42 – Updated: 2026-07-23 14:57
    VLAI
    Title
    Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager
    Summary
    Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.
    Severity
    No CVSS data available.
    CWE
    • CWE-290 - Authentication Bypass by Spoofing
    Assigner
    References
    URL Tags
    https://regularlabs.com/ product
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Advanced Module Manager extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-11.0.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Conditional Content extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Content Templater Pro extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-13.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ReReplacer extension Pro for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules."
            }
          ],
          "value": "Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-290",
              "description": "CWE-290 Authentication Bypass by Spoofing",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T14:57:26.836Z",
        "orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
        "shortName": "Joomla"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://regularlabs.com/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
    "assignerShortName": "Joomla",
    "cveId": "CVE-2026-63683",
    "datePublished": "2026-07-22T20:42:06.811Z",
    "dateReserved": "2026-07-17T15:49:15.531Z",
    "dateUpdated": "2026-07-23T14:57:26.836Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-63281 (GCVE-0-2026-63281)

    Vulnerability from nvd – Published: 2026-07-22 20:40 – Updated: 2026-07-23 14:55
    VLAI
    Title
    Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager
    Summary
    Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries.
    Severity
    No CVSS data available.
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    References
    URL Tags
    https://regularlabs.com/ product
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Advanced Module Manager extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-11.0.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Conditional Content extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Content Templater Pro extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-13.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ReReplacer extension Pro for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries."
            }
          ],
          "value": "Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T14:55:33.580Z",
        "orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
        "shortName": "Joomla"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://regularlabs.com/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
    "assignerShortName": "Joomla",
    "cveId": "CVE-2026-63281",
    "datePublished": "2026-07-22T20:40:29.002Z",
    "dateReserved": "2026-07-16T08:19:40.115Z",
    "dateUpdated": "2026-07-23T14:55:33.580Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-63280 (GCVE-0-2026-63280)

    Vulnerability from nvd – Published: 2026-07-22 20:43 – Updated: 2026-07-23 14:58
    VLAI
    Title
    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager
    Summary
    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions.
    Severity
    No CVSS data available.
    CWE
    • CWE-352 - Cross-Site Request Forgery (CSRF)
    • CWE-284 - Improper Access Control
    Assigner
    References
    URL Tags
    https://regularlabs.com/ product
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Advanced Module Manager extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-11.0.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Conditional Content extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Content Templater Pro extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-13.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ReReplacer extension Pro for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions."
            }
          ],
          "value": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-352",
              "description": "CWE-352 Cross-Site Request Forgery (CSRF)",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-284",
              "description": "CWE-284 Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T14:58:29.926Z",
        "orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
        "shortName": "Joomla"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://regularlabs.com/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
    "assignerShortName": "Joomla",
    "cveId": "CVE-2026-63280",
    "datePublished": "2026-07-22T20:43:01.914Z",
    "dateReserved": "2026-07-16T08:19:40.115Z",
    "dateUpdated": "2026-07-23T14:58:29.926Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-63265 (GCVE-0-2026-63265)

    Vulnerability from nvd – Published: 2026-07-22 20:44 – Updated: 2026-07-23 14:59
    VLAI
    Title
    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
    Summary
    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
    Severity
    No CVSS data available.
    CWE
    • CWE-352 - Cross-Site Request Forgery (CSRF)
    • CWE-284 - Improper Access Control
    Assigner
    References
    URL Tags
    https://regularlabs.com/ product
    Impacted products
    Vendor Product Version
    regularlabs.com Advanced Module Manager extension for Joomla Affected: 1.0.0-11.0.1
    		Create a notification for this product.
    regularlabs.com Articles Anywhere extension for Joomla Affected: 1.0.0-18.0.2
    		Create a notification for this product.
    regularlabs.com Articles Field extension for Joomla Affected: 1.0.0-4.7.1
    		Create a notification for this product.
    regularlabs.com Better Frontend Link extension for Joomla Affected: 1.0.0-2.2.5
    		Create a notification for this product.
    regularlabs.com Cache Cleaner extension for Joomla Affected: 1.0.0-9.7.6
    		Create a notification for this product.
    regularlabs.com CDN for Joomla extension for Joomla Affected: 1.0.0-7.3.7
    		Create a notification for this product.
    regularlabs.com Conditional Content extension for Joomla Affected: 1.0.0-6.0.0
    		Create a notification for this product.
    regularlabs.com Content Templater extension for Joomla Affected: 1.0.0-13.0.0
    		Create a notification for this product.
    regularlabs.com DB Replacer extension for Joomla Affected: 1.0.0-8.2.7
    		Create a notification for this product.
    regularlabs.com Email Protector extension for Joomla Affected: 1.0.0-6.3.7
    		Create a notification for this product.
    regularlabs.com Regular Labs Extension Manager extension for Joomla Affected: 1.0.0-9.2.5
    		Create a notification for this product.
    regularlabs.com GeoIP extension for Joomla Affected: 1.0.0-6.3.8
    		Create a notification for this product.
    regularlabs.com IP Login extension for Joomla Affected: 1.0.0-6.2.5
    		Create a notification for this product.
    regularlabs.com Keyboard Shortcuts extension for Joomla Affected: 1.0.0-3.2.5
    		Create a notification for this product.
    regularlabs.com Modals extension for Joomla Affected: 1.0.0-15.0.0
    		Create a notification for this product.
    regularlabs.com Modules Anywhere extension for Joomla Affected: 1.0.0-8.4.1
    		Create a notification for this product.
    regularlabs.com Quick Index extension for Joomla Affected: 1.0.0-4.3.6
    		Create a notification for this product.
    regularlabs.com ReReplacer extension for Joomla Affected: 1.0.0-15.0.3
    		Create a notification for this product.
    regularlabs.com Snippets extension for Joomla Affected: 1.0.0-9.3.10
    		Create a notification for this product.
    regularlabs.com Sourcerer extension for Joomla Affected: 1.0.0-12.2.8
    		Create a notification for this product.
    regularlabs.com Tooltips extension for Joomla Affected: 1.0.0-9.4.7
    		Create a notification for this product.
    regularlabs.com Users Anywhere extension for Joomla Affected: 1.0.0-1.2.7
    		Create a notification for this product.
    regularlabs.com What? Nothing! extension for Joomla Affected: 1.0.0-17.2.5
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Advanced Module Manager extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-11.0.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Articles Anywhere extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-18.0.2"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Articles Field extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-4.7.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Better Frontend Link extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-2.2.5"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Cache Cleaner extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-9.7.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CDN for Joomla extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-7.3.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Conditional Content extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Content Templater extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-13.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "DB Replacer extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-8.2.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Email Protector extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.3.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Regular Labs Extension Manager extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-9.2.5"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GeoIP extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.3.8"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IP Login extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.2.5"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Keyboard Shortcuts extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-3.2.5"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Modals extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Modules Anywhere extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-8.4.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Quick Index extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-4.3.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ReReplacer extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.3"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Snippets extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-9.3.10"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Sourcerer extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-12.2.8"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Tooltips extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-9.4.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Users Anywhere extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-1.2.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "What? Nothing! extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-17.2.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization."
            }
          ],
          "value": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-352",
              "description": "CWE-352 Cross-Site Request Forgery (CSRF)",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-284",
              "description": "CWE-284 Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T14:59:41.171Z",
        "orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
        "shortName": "Joomla"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://regularlabs.com/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
    "assignerShortName": "Joomla",
    "cveId": "CVE-2026-63265",
    "datePublished": "2026-07-22T20:44:05.164Z",
    "dateReserved": "2026-07-16T05:24:31.924Z",
    "dateUpdated": "2026-07-23T14:59:41.171Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-63265 (GCVE-0-2026-63265)

    Vulnerability from cvelistv5 – Published: 2026-07-22 20:44 – Updated: 2026-07-23 14:59
    VLAI
    Title
    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
    Summary
    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
    Severity
    No CVSS data available.
    CWE
    • CWE-352 - Cross-Site Request Forgery (CSRF)
    • CWE-284 - Improper Access Control
    Assigner
    References
    URL Tags
    https://regularlabs.com/ product
    Impacted products
    Vendor Product Version
    regularlabs.com Advanced Module Manager extension for Joomla Affected: 1.0.0-11.0.1
    		Create a notification for this product.
    regularlabs.com Articles Anywhere extension for Joomla Affected: 1.0.0-18.0.2
    		Create a notification for this product.
    regularlabs.com Articles Field extension for Joomla Affected: 1.0.0-4.7.1
    		Create a notification for this product.
    regularlabs.com Better Frontend Link extension for Joomla Affected: 1.0.0-2.2.5
    		Create a notification for this product.
    regularlabs.com Cache Cleaner extension for Joomla Affected: 1.0.0-9.7.6
    		Create a notification for this product.
    regularlabs.com CDN for Joomla extension for Joomla Affected: 1.0.0-7.3.7
    		Create a notification for this product.
    regularlabs.com Conditional Content extension for Joomla Affected: 1.0.0-6.0.0
    		Create a notification for this product.
    regularlabs.com Content Templater extension for Joomla Affected: 1.0.0-13.0.0
    		Create a notification for this product.
    regularlabs.com DB Replacer extension for Joomla Affected: 1.0.0-8.2.7
    		Create a notification for this product.
    regularlabs.com Email Protector extension for Joomla Affected: 1.0.0-6.3.7
    		Create a notification for this product.
    regularlabs.com Regular Labs Extension Manager extension for Joomla Affected: 1.0.0-9.2.5
    		Create a notification for this product.
    regularlabs.com GeoIP extension for Joomla Affected: 1.0.0-6.3.8
    		Create a notification for this product.
    regularlabs.com IP Login extension for Joomla Affected: 1.0.0-6.2.5
    		Create a notification for this product.
    regularlabs.com Keyboard Shortcuts extension for Joomla Affected: 1.0.0-3.2.5
    		Create a notification for this product.
    regularlabs.com Modals extension for Joomla Affected: 1.0.0-15.0.0
    		Create a notification for this product.
    regularlabs.com Modules Anywhere extension for Joomla Affected: 1.0.0-8.4.1
    		Create a notification for this product.
    regularlabs.com Quick Index extension for Joomla Affected: 1.0.0-4.3.6
    		Create a notification for this product.
    regularlabs.com ReReplacer extension for Joomla Affected: 1.0.0-15.0.3
    		Create a notification for this product.
    regularlabs.com Snippets extension for Joomla Affected: 1.0.0-9.3.10
    		Create a notification for this product.
    regularlabs.com Sourcerer extension for Joomla Affected: 1.0.0-12.2.8
    		Create a notification for this product.
    regularlabs.com Tooltips extension for Joomla Affected: 1.0.0-9.4.7
    		Create a notification for this product.
    regularlabs.com Users Anywhere extension for Joomla Affected: 1.0.0-1.2.7
    		Create a notification for this product.
    regularlabs.com What? Nothing! extension for Joomla Affected: 1.0.0-17.2.5
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Advanced Module Manager extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-11.0.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Articles Anywhere extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-18.0.2"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Articles Field extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-4.7.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Better Frontend Link extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-2.2.5"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Cache Cleaner extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-9.7.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CDN for Joomla extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-7.3.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Conditional Content extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Content Templater extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-13.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "DB Replacer extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-8.2.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Email Protector extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.3.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Regular Labs Extension Manager extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-9.2.5"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GeoIP extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.3.8"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "IP Login extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.2.5"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Keyboard Shortcuts extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-3.2.5"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Modals extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Modules Anywhere extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-8.4.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Quick Index extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-4.3.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ReReplacer extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.3"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Snippets extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-9.3.10"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Sourcerer extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-12.2.8"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Tooltips extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-9.4.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Users Anywhere extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-1.2.7"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "What? Nothing! extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-17.2.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization."
            }
          ],
          "value": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-352",
              "description": "CWE-352 Cross-Site Request Forgery (CSRF)",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-284",
              "description": "CWE-284 Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T14:59:41.171Z",
        "orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
        "shortName": "Joomla"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://regularlabs.com/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
    "assignerShortName": "Joomla",
    "cveId": "CVE-2026-63265",
    "datePublished": "2026-07-22T20:44:05.164Z",
    "dateReserved": "2026-07-16T05:24:31.924Z",
    "dateUpdated": "2026-07-23T14:59:41.171Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-63280 (GCVE-0-2026-63280)

    Vulnerability from cvelistv5 – Published: 2026-07-22 20:43 – Updated: 2026-07-23 14:58
    VLAI
    Title
    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager
    Summary
    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions.
    Severity
    No CVSS data available.
    CWE
    • CWE-352 - Cross-Site Request Forgery (CSRF)
    • CWE-284 - Improper Access Control
    Assigner
    References
    URL Tags
    https://regularlabs.com/ product
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Advanced Module Manager extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-11.0.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Conditional Content extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Content Templater Pro extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-13.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ReReplacer extension Pro for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions."
            }
          ],
          "value": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-352",
              "description": "CWE-352 Cross-Site Request Forgery (CSRF)",
              "lang": "en",
              "type": "CWE"
            },
            {
              "cweId": "CWE-284",
              "description": "CWE-284 Improper Access Control",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T14:58:29.926Z",
        "orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
        "shortName": "Joomla"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://regularlabs.com/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
    "assignerShortName": "Joomla",
    "cveId": "CVE-2026-63280",
    "datePublished": "2026-07-22T20:43:01.914Z",
    "dateReserved": "2026-07-16T08:19:40.115Z",
    "dateUpdated": "2026-07-23T14:58:29.926Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-63683 (GCVE-0-2026-63683)

    Vulnerability from cvelistv5 – Published: 2026-07-22 20:42 – Updated: 2026-07-23 14:57
    VLAI
    Title
    Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager
    Summary
    Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.
    Severity
    No CVSS data available.
    CWE
    • CWE-290 - Authentication Bypass by Spoofing
    Assigner
    References
    URL Tags
    https://regularlabs.com/ product
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Advanced Module Manager extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-11.0.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Conditional Content extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Content Templater Pro extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-13.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ReReplacer extension Pro for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules."
            }
          ],
          "value": "Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-290",
              "description": "CWE-290 Authentication Bypass by Spoofing",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T14:57:26.836Z",
        "orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
        "shortName": "Joomla"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://regularlabs.com/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
    "assignerShortName": "Joomla",
    "cveId": "CVE-2026-63683",
    "datePublished": "2026-07-22T20:42:06.811Z",
    "dateReserved": "2026-07-17T15:49:15.531Z",
    "dateUpdated": "2026-07-23T14:57:26.836Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-64792 (GCVE-0-2026-64792)

    Vulnerability from cvelistv5 – Published: 2026-07-22 20:40 – Updated: 2026-07-23 14:56
    VLAI
    Title
    Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions
    Summary
    Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
    Severity
    No CVSS data available.
    CWE
    • CWE-524 - Use of Cache Containing Sensitive Information
    Assigner
    References
    URL Tags
    https://regularlabs.com/ product
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Articles Anywhere extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-18.0.2"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Conditional Content extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Modules Anywhere extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-8.4.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ReReplacer extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.3"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Sourcerer extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-12.2.8"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Tabs \u0026 Accordions Pro extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-2.5.6"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Snippets Pro extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-9.3.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator\u2019s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors."
            }
          ],
          "value": "Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator\u2019s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-524",
              "description": "CWE-524 Use of Cache Containing Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T14:56:09.119Z",
        "orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
        "shortName": "Joomla"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://regularlabs.com/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
    "assignerShortName": "Joomla",
    "cveId": "CVE-2026-64792",
    "datePublished": "2026-07-22T20:40:58.877Z",
    "dateReserved": "2026-07-20T18:16:31.592Z",
    "dateUpdated": "2026-07-23T14:56:09.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-63281 (GCVE-0-2026-63281)

    Vulnerability from cvelistv5 – Published: 2026-07-22 20:40 – Updated: 2026-07-23 14:55
    VLAI
    Title
    Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager
    Summary
    Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries.
    Severity
    No CVSS data available.
    CWE
    • CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
    Assigner
    References
    URL Tags
    https://regularlabs.com/ product
    Impacted products
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Advanced Module Manager extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-11.0.1"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Conditional Content extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-6.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Content Templater Pro extension for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-13.0.0"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ReReplacer extension Pro for Joomla",
          "vendor": "regularlabs.com",
          "versions": [
            {
              "status": "affected",
              "version": "1.0.0-15.0.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries."
            }
          ],
          "value": "Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T14:55:33.580Z",
        "orgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
        "shortName": "Joomla"
      },
      "references": [
        {
          "tags": [
            "product"
          ],
          "url": "https://regularlabs.com/"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6ff30186-7fb7-4ad9-be33-533e7b05e586",
    "assignerShortName": "Joomla",
    "cveId": "CVE-2026-63281",
    "datePublished": "2026-07-22T20:40:29.002Z",
    "dateReserved": "2026-07-16T08:19:40.115Z",
    "dateUpdated": "2026-07-23T14:55:33.580Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}