CVE-2026-63281

Medium

Description

Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager - Stored condition values could also execute HTML/JavaScript in administrator summaries.

SeverityMedium
CVSS4.8
Exploit probability—
ProductAdvanced Module Manager extension for Joomla
PublishedJul 22, 2026
First seenJul 22, 2026

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
regularlabs.com Advanced Module Manager extension for Joomla1.0.0-11.0.1—
regularlabs.com Conditional Content extension for Joomla1.0.0-6.0.0—
regularlabs.com Content Templater Pro extension for Joomla1.0.0-13.0.0—
regularlabs.com ReReplacer extension Pro for Joomla1.0.0-15.0.3—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-63281 · Advanced Module Manager extension for Joomla · Dark Radar