19047 matches found
CVE-2026-64791
Summary: CVE-2026-64791 affects Joomla Extensions by Regular Labs (Regular Labs Extension Manager). The issue is Inconsistent CSRF token checks and privilege checks on administrator routes and during install/update/uninstall processing, potentially letting an unauthorized backend user or CSRF att...
CVE-2026-63684 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks...
CVE-2026-63684
CVE-2026-63684 concerns Joomla extensions from Regular Labs (regularlabs.com). The described vulnerability stems from inconsistent CSRF token checks and privilege checks across multiple admin/import/export actions, including administrator actions and editor popups. This weakness could allow unaut...
CVE-2026-63264
Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping 5.9.3 - The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller...
EUVD-2026-47619
The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller...
CVE-2026-63264 Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3
The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller...
CVE-2026-63264 Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3
Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping 5.9.3 - The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller...
CVE-2026-63048
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE...
CVE-2026-63047
Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information...
CVE-2026-63048 Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE...
CVE-2026-63048 Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE...
CVE-2026-63048
CVE-2026-63048 affects the Joomla extension Page Builder CK (joomlack.fr) prior to version 3.6.2. The issue is improper access control allowing an authenticated user to upload arbitrary files, enabling remote code execution (RCE). This is described as an authenticated arbitrary file upload leadin...
EUVD-2026-47618
The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE...
CVE-2026-63048
Joomla Extension - joomlack.fr - Improper access control in Page Builder CK 3.6.2 - The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE...
CVE-2026-63047
The CVE-2026-63047 vulnerability affects the Joomla extension Events Booking prior version 5.0-5.8.1, where an ACL/permissions check failed to properly verify that an actor is allowed to download invoice information. The underlying issue is an improper access-control check that could enable exfil...
CVE-2026-63047 Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1
Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information...
CVE-2026-63047 Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1
Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information...
EUVD-2026-47617
The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information...
CVE-2026-63047
Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information...
