CVE-2026-63684: regularlabs.com Content Templater extension for

Описание

Оригинално описание

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks. Unauthorized backend users or CSRF attacks could expose, create or modify extension configuration and items.

Засегнати продукти

• regularlabs.com Content Templater extension for Joomla: 1.0.0-13.0.0
• regularlabs.com ReReplacer extension for Joomla: 1.0.0-15.0.3
• regularlabs.com Snippets extension for Joomla: 1.0.0-9.3.10

Вид слабост

• CWE-352 CSRF
• CWE-284 Неправилен контрол на достъпа

История

Други уязвимости в regularlabs.com Content Templater extension for Joomla

• 8.0CVE-2026-63265
• 7.5CVE-2026-64792

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-63684
• https://nvd.nist.gov/vuln/detail/CVE-2026-63684
• https://regularlabs.com/