CVE-2026-63265

Name of the Vulnerable Software and Affected Versions Regular Labs extension for Joomla (affected versions not specified)

Description Privileged AJAX endpoints in the Regular Labs extension for Joomla do not consistently validate CSRF tokens, component or item permissions, and server-generated form configurations. This allows authenticated users with lower privileges or attackers using Cross-Site Request Forgery (CSRF)—a technique where a user is tricked into executing unwanted actions on a web application—to perform unauthorized lookups or data mutations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.