CVE-2026-65757

Summary

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens.

Affected Software

VendorProductVersion RangeStatus
regularlabs.comModules Anywhere extension for Joomla1.0.0-8.4.1affected

Weaknesses

  • CWE-352: CWE-352 Cross-Site Request Forgery (CSRF)
  • CWE-284: CWE-284 Improper Access Control

References