Veille CVE

Recherche « regularlabs.com Advanced Module Manager extension for Joomla »

5 CVE

Critique 0 Élevée 3 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « regularlabs.com Advanced Module Manager extension for Joomla » ✕
  1. CVE-2026-85188 6.9 Moyenne

    regularlabs.com Advanced Module Manager (Free, Pro) extension for Joomla · regularlabs.com Conditional Content (Free, Pro) extension for Joomla · regularlabs.com Content Templater (Pro) extension for Joomla · regularlabs.com ReReplacer (Pro) extension for Joomla

    Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14.2.0, ReReplacer (Pro) < 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the set is linked. The affected code accepts the database table and label-column names from the request. Although these names are quoted as SQL identifiers, they are not restricted to the tables and columns used by supported Regular Labs integrations. An attacker can therefore select a valid but unrelated database field. This is an authorization failure rather than SQL injection.

  2. CVE-2026-63683 7.5 Élevée

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Conditional Content extension for Joomla · regularlabs.com Content Templater Pro extension for Joomla · regularlabs.com ReReplacer extension Pro for Joomla

    Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.

  3. CVE-2026-63281 4.8 Moyenne

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Conditional Content extension for Joomla · regularlabs.com Content Templater Pro extension for Joomla · regularlabs.com ReReplacer extension Pro for Joomla

    Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries.

  4. CVE-2026-63280 8.8 Élevée

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Conditional Content extension for Joomla · regularlabs.com Content Templater Pro extension for Joomla · regularlabs.com ReReplacer extension Pro for Joomla

    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions.

  5. CVE-2026-63265 8.0 Élevée

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Articles Field extension for Joomla · regularlabs.com Better Frontend Link extension for Joomla

    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.