Veille CVE

Recherche « regularlabs.com Sourcerer extension for Joomla »

4 CVE

Critique 2 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « regularlabs.com Sourcerer extension for Joomla » ✕
  1. CVE-2026-74253 10.0 Critique

    regularlabs.com Sourcerer extension for Joomla

    Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0 - Regular Labs Sourcerer before 16.0.0 processes {source} blocks found in Joomla’s final rendered HTML without reliably determining where that code originated.

  2. CVE-2026-64796 9.8 Critique

    regularlabs.com Sourcerer extension for Joomla

    Joomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension - Free did not require both the article creator and last modifier to be Super Users before executing article PHP. Pro did not consistently enforce configured CSS, JavaScript and PHP permissions across tags, attributes, files and both article owners. PHP include attributes could also escape the configured include folder, and executable script/style variants could bypass detection.

  3. CVE-2026-64792 7.5 Élevée

    regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Conditional Content extension for Joomla · regularlabs.com Modules Anywhere extension for Joomla · regularlabs.com ReReplacer extension for Joomla

    Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.

  4. CVE-2026-63265 8.0 Élevée

    regularlabs.com Advanced Module Manager extension for Joomla · regularlabs.com Articles Anywhere extension for Joomla · regularlabs.com Articles Field extension for Joomla · regularlabs.com Better Frontend Link extension for Joomla

    Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.