Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.

CWE-284

CWE-352

https://regularlabs.com/

[{"vendor":"regularlabs.com","product":"Advanced Module Manager extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-11.0.1","status":"affected"}]},{"vendor":"regularlabs.com","product":"Articles Anywhere extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-18.0.2","status":"affected"}]},{"vendor":"regularlabs.com","product":"Articles Field extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-4.7.1","status":"affected"}]},{"vendor":"regularlabs.com","product":"Better Frontend Link extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-2.2.5","status":"affected"}]},{"vendor":"regularlabs.com","product":"Cache Cleaner extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-9.7.6","status":"affected"}]},{"vendor":"regularlabs.com","product":"CDN for Joomla extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-7.3.7","status":"affected"}]},{"vendor":"regularlabs.com","product":"Conditional Content extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-6.0.0","status":"affected"}]},{"vendor":"regularlabs.com","product":"Content Templater extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-13.0.0","status":"affected"}]},{"vendor":"regularlabs.com","product":"DB Replacer extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-8.2.7","status":"affected"}]},{"vendor":"regularlabs.com","product":"Email Protector extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-6.3.7","status":"affected"}]},{"vendor":"regularlabs.com","product":"Regular Labs Extension Manager extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-9.2.5","status":"affected"}]},{"vendor":"regularlabs.com","product":"GeoIP extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-6.3.8","status":"affected"}]},{"vendor":"regularlabs.com","product":"IP Login extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-6.2.5","status":"affected"}]},{"vendor":"regularlabs.com","product":"Keyboard Shortcuts extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-3.2.5","status":"affected"}]},{"vendor":"regularlabs.com","product":"Modals extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-15.0.0","status":"affected"}]},{"vendor":"regularlabs.com","product":"Modules Anywhere extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-8.4.1","status":"affected"}]},{"vendor":"regularlabs.com","product":"Quick Index extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-4.3.6","status":"affected"}]},{"vendor":"regularlabs.com","product":"ReReplacer extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-15.0.3","status":"affected"}]},{"vendor":"regularlabs.com","product":"Snippets extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-9.3.10","status":"affected"}]},{"vendor":"regularlabs.com","product":"Sourcerer extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-12.2.8","status":"affected"}]},{"vendor":"regularlabs.com","product":"Tooltips extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-9.4.7","status":"affected"}]},{"vendor":"regularlabs.com","product":"Users Anywhere extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-1.2.7","status":"affected"}]},{"vendor":"regularlabs.com","product":"What? Nothing! extension for Joomla","defaultStatus":"unaffected","versions":[{"version":"1.0.0-17.2.5","status":"affected"}]}]