What is the CVSS score of EUVD-2026-47804?

EUVD-2026-47804 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Content Templater Extension For Joomla EUVD-2026-47804

| CVE-2026-63684 HIGH

Cross-Site Request Forgery (CSRF) (CWE-352)

2026-07-22 Joomla

CSRF Content Templater Extension For Joomla Rereplacer Extension For Joomla Snippets Extension For Joomla Regularlabs Com

8.8

CVSS 3.1 · Vendor: Joomla

Severity by source

Vendor (Joomla) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from Vendor (Joomla) · only source for this CVE.

CVSS VectorVendor: Joomla

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 27, 2026 - 18:23 vuln.today

CVSS changed

Jul 27, 2026 - 18:22 NVD

8.8 (HIGH)

CVE Published

Jul 22, 2026 - 20:39 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 22, 2026 - 20:39 cve.org

HIGH 8.8

DescriptionCVE.org

Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks. Unauthorized backend users or CSRF attacks could expose, create or modify extension configuration and items.

AnalysisAI

Missing CSRF tokens, item-permission, and input-validation checks in Regular Labs Joomla extensions (Content Templater, ReReplacer, Snippets) allow unauthorized backend users or CSRF attacks to expose, create, or modify extension configuration and items. This high-severity flaw (CVSS 8.8) affects multiple versions, with low exploitation probability (EPSS 0.13%). No active exploitation or public exploit code has been identified.