Approved changes feed: RSS · Atom

cpe:2.3:a:regularlabs.com:conditional_content_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRegularlabs.Com (738da9fd-b178-52c4-917b-e11dbc67f76c)
ProductConditional Content Extension For Joomla (474edfaa-bb85-5fd7-a73c-c511d5d6bdba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-64792 vulnerable 2026-07-29 01:06:19.833834 Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions
Joomla Extension - regularlabs.com - disclosure of restricted content via search index in various Regular Labs extensions - Smart Search indexing could render generated content using the indexing administrator’s identity instead of a public guest. Restricted or administrator-only content could consequently be stored in the public search index and disclosed to visitors.
Published: 2026-07-22T20:40:58.877Z
Updated: 2026-07-28T05:31:54.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63683 vulnerable 2026-07-29 01:06:19.432225 Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager
Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules.
Published: 2026-07-22T20:42:06.811Z
Updated: 2026-07-28T05:33:18.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63281 vulnerable 2026-07-29 01:06:19.407517 Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager
Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries.
Published: 2026-07-22T20:40:29.002Z
Updated: 2026-07-27T13:28:27.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63280 vulnerable 2026-07-29 01:06:19.401690 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions.
Published: 2026-07-22T20:43:01.914Z
Updated: 2026-07-28T05:34:22.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63265 vulnerable 2026-07-29 01:06:19.356787 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Published: 2026-07-22T20:44:05.164Z
Updated: 2026-07-28T05:35:26.645Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.