CVE-2026-63265

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints

Published Jul 22, 2026 CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Description
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References
Link Providers
https://regularlabs.com/ cve-icon cve-icon
History
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Regularlabs.com
Regularlabs.com advanced Module Manager Extension For Joomla
Regularlabs.com articles Anywhere Extension For Joomla
Regularlabs.com articles Field Extension For Joomla
Regularlabs.com better Frontend Link Extension For Joomla
Regularlabs.com cache Cleaner Extension For Joomla
Regularlabs.com cdn For Joomla Extension For Joomla
Regularlabs.com conditional Content Extension For Joomla
Regularlabs.com content Templater Extension For Joomla
Regularlabs.com db Replacer Extension For Joomla
Regularlabs.com email Protector Extension For Joomla
Regularlabs.com geoip Extension For Joomla
Regularlabs.com ip Login Extension For Joomla
Regularlabs.com keyboard Shortcuts Extension For Joomla
Regularlabs.com modals Extension For Joomla
Regularlabs.com modules Anywhere Extension For Joomla
Regularlabs.com quick Index Extension For Joomla
Regularlabs.com regular Labs Extension Manager Extension For Joomla
Regularlabs.com rereplacer Extension For Joomla
Regularlabs.com snippets Extension For Joomla
Regularlabs.com sourcerer Extension For Joomla
Regularlabs.com tooltips Extension For Joomla
Regularlabs.com users Anywhere Extension For Joomla
Regularlabs.com what? Nothing! Extension For Joomla
Vendors & Products Regularlabs.com
Regularlabs.com advanced Module Manager Extension For Joomla
Regularlabs.com articles Anywhere Extension For Joomla
Regularlabs.com articles Field Extension For Joomla
Regularlabs.com better Frontend Link Extension For Joomla
Regularlabs.com cache Cleaner Extension For Joomla
Regularlabs.com cdn For Joomla Extension For Joomla
Regularlabs.com conditional Content Extension For Joomla
Regularlabs.com content Templater Extension For Joomla
Regularlabs.com db Replacer Extension For Joomla
Regularlabs.com email Protector Extension For Joomla
Regularlabs.com geoip Extension For Joomla
Regularlabs.com ip Login Extension For Joomla
Regularlabs.com keyboard Shortcuts Extension For Joomla
Regularlabs.com modals Extension For Joomla
Regularlabs.com modules Anywhere Extension For Joomla
Regularlabs.com quick Index Extension For Joomla
Regularlabs.com regular Labs Extension Manager Extension For Joomla
Regularlabs.com rereplacer Extension For Joomla
Regularlabs.com snippets Extension For Joomla
Regularlabs.com sourcerer Extension For Joomla
Regularlabs.com tooltips Extension For Joomla
Regularlabs.com users Anywhere Extension For Joomla
Regularlabs.com what? Nothing! Extension For Joomla
Type Values Removed Values Added
Description Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization. Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Type Values Removed Values Added
Description Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Title Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints
Weaknesses CWE-284
CWE-352
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
Joomla
Published
Updated
Jul 28, 2026, 5:35 AM
Reserved
Jul 16, 2026, 5:24 AM
Status
Deferred
Published
Jul 22, 2026, 9:18 PM
Modified
Oct 24, 2026, 4:10 PM