Approved changes feed: RSS · Atom

cpe:2.3:a:regularlabs.com:conditional_content_pro_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRegularlabs.Com (738da9fd-b178-52c4-917b-e11dbc67f76c)
ProductConditional Content Pro Extension For Joomla (ae0c946e-b74e-5096-91db-d6409df10932)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-85192 vulnerable 2026-09-16 04:33:08.245572 Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0
Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checking who authored the article. Joomla's normal Author text filter preserves the syntax, so publishing the article causes the code to run as the web-server process.
Published: 2026-09-14T06:18:01.279Z
Updated: 2026-09-14T11:28:53.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.