The Advanced Module Manager extension for Joomla by regularlabs.com contains a client IP spoofing vulnerability in its conditions manager component. The vulnerability arises because the IP and GeoIP conditions rely on trusted but spoofable forwarded headers, enabling remote clients to bypass location-based access controls. This flaw is identified as CWE-290 (Authentication Bypass by Spoofing) and affects versions 1.0.0 through 11.0.1. No official patch or remediation level has been provided as of the publication date.

Attackers can bypass location-based rules enforced by the extension by spoofing client IP addresses via manipulated forwarded headers. This could allow unauthorized access or actions restricted by geographic conditions. The vulnerability does not impact confidentiality but has a high impact on integrity due to bypassing intended access controls. Availability is not affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should consider disabling IP and GeoIP based conditions or implementing additional validation on forwarded headers to prevent spoofing. Monitoring for unusual access patterns related to location-based rules is advisable.