Veille CVE

Recherche « regularlabs.com Conditional Content Pro extension for Joomla »

7 CVE

Critique 1 Élevée 4 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « regularlabs.com Conditional Content Pro extension for Joomla » ✕
  1. CVE-2026-85192 9.4 Critique

    regularlabs.com Conditional Content Pro extension for Joomla

    Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checking who authored the article. Joomla's normal Author text filter preserves the syntax, so publishing the article causes the code to run as the web-server process.

  2. CVE-2026-85188 6.9 Moyenne

    regularlabs.com Advanced Module Manager (Free, Pro) extension for Joomla · regularlabs.com Conditional Content (Free, Pro) extension for Joomla · regularlabs.com Content Templater (Pro) extension for Joomla · regularlabs.com ReReplacer (Pro) extension for Joomla

    Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14.2.0, ReReplacer (Pro) < 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the set is linked. The affected code accepts the database table and label-column names from the request. Although these names are quoted as SQL identifiers, they are not restricted to the tables and columns used by supported Regular Labs integrations. An attacker can therefore select a valid but unrelated database field. This is an authorization failure rather than SQL injection.

  3. CVE-2026-64792 7.5 Élevée

    regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Conditional Content extension for Joomla · regularlabs.com Modules Anywhere extension for Joomla · regularlabs.com ReReplacer extension for Joomla

    Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.

  4. CVE-2026-63683 7.5 Élevée

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Conditional Content extension for Joomla · regularlabs.com Content Templater Pro extension for Joomla · regularlabs.com ReReplacer extension Pro for Joomla

    Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.

  5. CVE-2026-63281 4.8 Moyenne

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Conditional Content extension for Joomla · regularlabs.com Content Templater Pro extension for Joomla · regularlabs.com ReReplacer extension Pro for Joomla

    Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries.

  6. CVE-2026-63280 8.8 Élevée

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Conditional Content extension for Joomla · regularlabs.com Content Templater Pro extension for Joomla · regularlabs.com ReReplacer extension Pro for Joomla

    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions.

  7. CVE-2026-63265 8.0 Élevée

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Articles Field extension for Joomla · regularlabs.com Better Frontend Link extension for Joomla

    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.