CVE-2026-65757 PUBLISHED

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension

Assigner: Joomla
Reserved: 22.07.2026 Published: 23.07.2026 Updated: 23.07.2026

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens.

Product Status

Vendor regularlabs.com
Product Modules Anywhere extension for Joomla
Versions Default: unaffected
  • Version 1.0.0-8.4.1 is affected

References

Problem Types

  • CWE-352 Cross-Site Request Forgery (CSRF) CWE
  • CWE-284 Improper Access Control CWE