What’s Vulnerable › Vulnerabilities

CVE-2026-63281: Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager

• Severity: medium (CVSS 4.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-22 · updated 2026-10-24
• Weakness: CWE-79

Description

Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries.

Affected products

• regularlabs.com Advanced Module Manager extension for Joomla: 1.0.0-11.0.1
• regularlabs.com Conditional Content extension for Joomla: 1.0.0-6.0.0
• regularlabs.com Content Templater Pro extension for Joomla: 1.0.0-13.0.0
• regularlabs.com ReReplacer extension Pro for Joomla: 1.0.0-15.0.3

References

• https://regularlabs.com/

Get alerted when CVE-2026-63281 or the next vulnerability affects your stack