CVE-2026-63685
Vulnerability Description
Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-284
Source
NVD
Vendor
regularlabs.com
Product
DB Replacer extension for Joomla
Discussion (0)
Add Comment
No comments yet. Be the first!