← CVE Intelligence

CVE-2026-63684

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension PUBLISHED

Description (CNA)

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks. Unauthorized backend users or CSRF attacks could expose, create or modify extension configuration and items.

Affected (CNA)

Vendor / productVersions
regularlabs.com / Content Templater extension for Joomlaaffected 1.0.0-13.0.0
regularlabs.com / ReReplacer extension for Joomlaaffected 1.0.0-15.0.3
regularlabs.com / Snippets extension for Joomlaaffected 1.0.0-9.3.10

CWE

CWE-352, CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.