CVE-2026-65944

3th percentile - higher than 3% of all known CVEs

CSRF vulnerability in the Joomla extension RO CSVI versions prior to 9.11.0. CSRF vectors exist in AJAX endpoint handlers, potentially allowing an attacker to perform unauthorized actions in the context of an administrator's session.

The risk involves an attacker tricking an administrator into executing a request, leading to unauthorized data or configuration modifications.

Update the RO CSVI extension to version 9.11.0 or later, which fixes this vulnerability.