CVE-2026-63265
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
AJAX endpoints in various Regular Labs extensions for Joomla did not consistently require valid CSRF tokens, matching component/item permissions, or trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.
Risk Assessment
An attacker could unauthorizedly read or modify data through vulnerable AJAX endpoints, potentially leading to information disclosure or privilege escalation.
Recommendation
Update all Regular Labs extensions to the latest versions containing security fixes.
Other vulnerabilities in Regular Labs extensions
See all- CVE-2026-64795Medium
XSS vectors in tag-provided inputs in various Regular Labs extensions for Joomla allow tag-provided custom HTML, module content/title overrides and decoded modal or tooltip values to execute unsafe markup. A content author could inject JavaScript that ran in visitors’ browsers.
- CVE-2026-64792High
Multiple Regular Labs extensions for Joomla! disclose restricted content via the Smart Search index: indexing can render generated content using the indexing administrator's identity instead of a public guest, causing restricted or administrator-only content to be stored in the public search index.
- CVE-2026-63684High
Multiple Regular Labs extensions for Joomla did not consistently check CSRF tokens, item permissions, or input validation in admin actions, editor popups, and import/export operations. Unauthorized backend users or CSRF attacks could expose, create, or modify extension configuration and items.
Original NVD description (English source)
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.