Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
Link Providers
https://regularlabs.com/ cve-icon cve-icon
History

Tue, 28 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Thu, 23 Jul 2026 21:45:00 +0000

Type Values Removed Values Added
First Time appeared Regularlabs.com
Regularlabs.com advanced Module Manager Extension For Joomla
Regularlabs.com articles Anywhere Extension For Joomla
Regularlabs.com articles Field Extension For Joomla
Regularlabs.com better Frontend Link Extension For Joomla
Regularlabs.com cache Cleaner Extension For Joomla
Regularlabs.com cdn For Joomla Extension For Joomla
Regularlabs.com conditional Content Extension For Joomla
Regularlabs.com content Templater Extension For Joomla
Regularlabs.com db Replacer Extension For Joomla
Regularlabs.com email Protector Extension For Joomla
Regularlabs.com geoip Extension For Joomla
Regularlabs.com ip Login Extension For Joomla
Regularlabs.com keyboard Shortcuts Extension For Joomla
Regularlabs.com modals Extension For Joomla
Regularlabs.com modules Anywhere Extension For Joomla
Regularlabs.com quick Index Extension For Joomla
Regularlabs.com regular Labs Extension Manager Extension For Joomla
Regularlabs.com rereplacer Extension For Joomla
Regularlabs.com snippets Extension For Joomla
Regularlabs.com sourcerer Extension For Joomla
Regularlabs.com tooltips Extension For Joomla
Regularlabs.com users Anywhere Extension For Joomla
Regularlabs.com what? Nothing! Extension For Joomla
Vendors & Products Regularlabs.com
Regularlabs.com advanced Module Manager Extension For Joomla
Regularlabs.com articles Anywhere Extension For Joomla
Regularlabs.com articles Field Extension For Joomla
Regularlabs.com better Frontend Link Extension For Joomla
Regularlabs.com cache Cleaner Extension For Joomla
Regularlabs.com cdn For Joomla Extension For Joomla
Regularlabs.com conditional Content Extension For Joomla
Regularlabs.com content Templater Extension For Joomla
Regularlabs.com db Replacer Extension For Joomla
Regularlabs.com email Protector Extension For Joomla
Regularlabs.com geoip Extension For Joomla
Regularlabs.com ip Login Extension For Joomla
Regularlabs.com keyboard Shortcuts Extension For Joomla
Regularlabs.com modals Extension For Joomla
Regularlabs.com modules Anywhere Extension For Joomla
Regularlabs.com quick Index Extension For Joomla
Regularlabs.com regular Labs Extension Manager Extension For Joomla
Regularlabs.com rereplacer Extension For Joomla
Regularlabs.com snippets Extension For Joomla
Regularlabs.com sourcerer Extension For Joomla
Regularlabs.com tooltips Extension For Joomla
Regularlabs.com users Anywhere Extension For Joomla
Regularlabs.com what? Nothing! Extension For Joomla

Thu, 23 Jul 2026 15:45:00 +0000

Type Values Removed Values Added
Description Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization. Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.

Wed, 22 Jul 2026 21:00:00 +0000

Type Values Removed Values Added
Description Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Title Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
Weaknesses CWE-284
CWE-352
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Joomla

Published:

Updated: 2026-07-28T05:35:26.645Z

Reserved: 2026-07-16T05:24:31.924Z

Link: CVE-2026-63265

cve-icon Vulnrichment

Updated: 2026-07-27T18:39:52.501Z

cve-icon NVD

Status : Deferred

Published: 2026-07-22T21:18:09.547

Modified: 2026-07-27T19:17:19.303

Link: CVE-2026-63265

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T23:15:04Z

Weaknesses