All packages
Regular Labs conditions manager vulnerabilities
3 known CVE vulnerabilities in Regular Labs conditions manager, translated and rated.
- CVE-2026-63683High
The Regular Labs conditions manager for Joomla! trusts spoofable forwarded headers for IP and GeoIP conditions, allowing remote clients to bypass location-based rules.
- CVE-2026-63281Medium
A stored XSS vulnerability in the Regular Labs conditions manager for Joomla allows stored condition values to execute HTML/JavaScript in administrator summaries.
- CVE-2026-63280High
The Regular Labs Conditions Manager for Joomla did not consistently check CSRF tokens or component/mapped-item permissions during condition administration. An unauthorized backend user or CSRF attack could modify conditions.