Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-63684

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Joomla

Description

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks. Unauthorized backend users or CSRF attacks could expose, create or modify extension configuration and items.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

regularlabs.com Content Templater extension for Joomla

Default version status: unaffected

  • 1.0.0-13.0.0affected

regularlabs.com ReReplacer extension for Joomla

Default version status: unaffected

  • 1.0.0-15.0.3affected

regularlabs.com Snippets extension for Joomla

Default version status: unaffected

  • 1.0.0-9.3.10affected

References