CVE-2026-63265
|
| |
|
|
Software afectado |
JOOMLA |
|
|
|
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-63265 |
