CVE-2026-63684

Vulnerability Description

Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks. Unauthorized backend users or CSRF attacks could expose, create or modify extension configuration and items.

Vulnerability Details

Published Date

July 22, 2026

Last Modified

July 22, 2026

CWE ID

CWE-284

Source

NVD

Vendor

regularlabs.com

Product

Content Templater extension for Joomla, ReReplacer extension for Joomla, Snippets extension for Joomla

External References

https://regularlabs.com/

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment