CVE-2026-85188

Advanced Module Manager (Free, Pro) extension for Joomla · Vulnerability

CVSS 4.0 6.9 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-85188

Published

Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module Manager (Free, Pro) < 12.1.0, Conditional Content (Free, Pro) < 8.0.0, Content Templater (Pro) < 14.2.0, ReReplacer (Pro) < 16.2.0 for Joomla - The Conditions editor creates a default Condition Set name from the item to which the set is linked. The affected code accepts the database table and label-column names from the request. Although these names are quoted as SQL identifiers, they are not restricted to the tables and columns used by supported Regular Labs integrations. An attacker can therefore select a valid but unrelated database field. This is an authorization failure rather than SQL injection.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-85188

Published

plg_system_advancedmodules

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "packageName": "plg_system_advancedmodules",
                    "product": "Advanced Module Manager (Free, Pro) extension for Joomla",
                    "vendor": "regularlabs.com",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "9.0.0-12.0.4"
                        }
                    ]
                }

plg_system_conditionalcontent

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "packageName": "plg_system_conditionalcontent",
                    "product": "Conditional Content (Free, Pro) extension for Joomla",
                    "vendor": "regularlabs.com",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "4.0.0-7.1.0"
                        }
                    ]
                }

plg_system_contenttemplater

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "packageName": "plg_system_contenttemplater",
                    "product": "Content Templater (Pro) extension for Joomla",
                    "vendor": "regularlabs.com",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "11.0.0-14.1.0"
                        }
                    ]
                }

com_rereplacer

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "unaffected",
                    "packageName": "com_rereplacer",
                    "product": "ReReplacer (Pro) extension for Joomla",
                    "vendor": "regularlabs.com",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "12.2.0-16.1.0"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON