Back to overview

CVE-2026-65757

Description
The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens.

Metadata

CVE ID
CVE-2026-65757
State
PUBLISHED
Assigner
Joomla
Reserved
2026-07-22 20:46 UTC
Published
2026-07-23 09:14 UTC
Last updated
2026-07-23 09:14 UTC
Primary CWE
CWE-352
CWE-352 Cross-Site Request Forgery (CSRF)
Vendor / Product
regularlabs.com / Modules Anywhere extension for Joomla
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
regularlabs.com Modules Anywhere extension for Joomla — 1.0.0-8.4.1
Weakness (CWE)
CWESourceDescription
CWE-284 cna CWE-284 Improper Access Control
CWE-352 cna CWE-352 Cross-Site Request Forgery (CSRF)
References (1)
Back to overview