3 matches found
CVE-2026-63280
The CVE-2026-63280 entry concerns the Joomla extension Regular Labs Conditions Manager. Affected component/function: conditions administration within the extension. Root cause: inconsistent enforcement of tokens (CSRF protection) and of component/mapped-item permissions. This could enable imprope...
CVE-2026-63683
The CVE-2026-63683 entry concerns the Joomla extension from Regular Labs (the Regular Labs conditions manager). The description in the connected CVE records states that IP and GeoIP conditions trust spoofable forwarded headers, enabling remote clients to bypass location-based rules. The root caus...
CVE-2026-63281
CVE-2026-63281 affects the Regular Labs Conditions Manager Joomla extension. The issue is a stored cross-site scripting (XSS) vulnerability where stored condition values can execute HTML/JavaScript in administrator summaries. This is documented in CVE records from NVD and CVE List, describing the...