What is the CVSS score of EUVD-2026-47896?

EUVD-2026-47896 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.1%.

Cache Cleaner Extension For Joomla EUVD-2026-47896

| CVE-2026-64871 MEDIUM

Cross-Site Request Forgery (CSRF) (CWE-352)

2026-07-23 Joomla

GHSA-49jw-c4hx-66m6

CSRF Cache Cleaner Extension For Joomla Regularlabs Com

5.4

CVSS 3.1 · Vendor: Joomla

Severity by source

Vendor (Joomla) PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Primary rating from Vendor (Joomla) · only source for this CVE.

CVSS VectorVendor: Joomla

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 12:24 vuln.today

CVSS changed

Jul 24, 2026 - 20:22 NVD

5.4 (MEDIUM)

CVE Published

Jul 23, 2026 - 09:14 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Administrator URL purges did not consistently require a valid token and cache-management permission.

AnalysisAI

Cross-site request forgery in the Cache Cleaner extension for Joomla allows an authenticated administrator with cache-management permission to be tricked into performing unauthorized URL purges due to inconsistent token validation. Affected versions 1.0.0 through 9.7.6 may experience limited confidentiality and integrity compromise. No public exploit or active exploitation has been identified, and the EPSS score is low (0.13%).