CVE-2026-64871

Summary

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension - Administrator URL purges did not consistently require a valid token and cache-management permission.

Affected Software

VendorProductVersion RangeStatus
regularlabs.comCache Cleaner extension for Joomla1.0.0-9.7.6affected

Weaknesses

  • CWE-352: CWE-352 Cross-Site Request Forgery (CSRF)
  • CWE-284: CWE-284 Improper Access Control

References