CVE-2026-63280
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
The Regular Labs Conditions Manager for Joomla did not consistently check CSRF tokens or component/mapped-item permissions during condition administration. An unauthorized backend user or CSRF attack could modify conditions.
Risk Assessment
An attacker could unauthorizedly change condition rules, potentially affecting the behavior of other extensions and leading to unexpected system behavior.
Recommendation
Update the Regular Labs Conditions Manager to the latest version containing security fixes.
Other vulnerabilities in Regular Labs Conditions Manager
See all- CVE-2026-63683High
The Regular Labs conditions manager for Joomla! trusts spoofable forwarded headers for IP and GeoIP conditions, allowing remote clients to bypass location-based rules.
- CVE-2026-63281Medium
A stored XSS vulnerability in the Regular Labs conditions manager for Joomla allows stored condition values to execute HTML/JavaScript in administrator summaries.
Original NVD description (English source)
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions.