CVE-2026-63280

Summary

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions.

Affected Software

VendorProductVersion RangeStatus
regularlabs.comAdvanced Module Manager extension for Joomla1.0.0-11.0.1affected
regularlabs.comConditional Content extension for Joomla1.0.0-6.0.0affected
regularlabs.comContent Templater Pro extension for Joomla1.0.0-13.0.0affected
regularlabs.comReReplacer extension Pro for Joomla1.0.0-15.0.3affected

Weaknesses

  • CWE-352: CWE-352 Cross-Site Request Forgery (CSRF)
  • CWE-284: CWE-284 Improper Access Control

References