CVE-2026-63281
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A stored XSS vulnerability in the Regular Labs conditions manager for Joomla allows stored condition values to execute HTML/JavaScript in administrator summaries.
Risk Assessment
An attacker with content author privileges can inject malicious scripts that execute in the admin panel, potentially leading to administrator account takeover.
Recommendation
Update Regular Labs extensions to the latest versions that fix this XSS vulnerability.
Other vulnerabilities in Regular Labs conditions manager
See all- CVE-2026-63683High
The Regular Labs conditions manager for Joomla! trusts spoofable forwarded headers for IP and GeoIP conditions, allowing remote clients to bypass location-based rules.
- CVE-2026-63280High
The Regular Labs Conditions Manager for Joomla did not consistently check CSRF tokens or component/mapped-item permissions during condition administration. An unauthorized backend user or CSRF attack could modify conditions.
Original NVD description (English source)
Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries.