Cache Cleaner Extension For Joomla
Monthly
Broken CSRF token enforcement across 23 Regular Labs AJAX-based Joomla extensions allows authenticated lower-privileged users to directly invoke privileged endpoints, or allows any attacker to perform those operations via a cross-site request forgery attack against an authenticated victim. The affected surface spans virtually the entire Regular Labs extension portfolio, from Advanced Module Manager through Sourcerer, covering all versions from 1.0.0 up to per-extension maximums. No public exploit or active exploitation has been confirmed; EPSS is 0.13%, consistent with the UI:R requirement that prevents mass automated attack.
Cross-site request forgery in the Cache Cleaner extension for Joomla allows an authenticated administrator with cache-management permission to be tricked into performing unauthorized URL purges due to inconsistent token validation. Affected versions 1.0.0 through 9.7.6 may experience limited confidentiality and integrity compromise. No public exploit or active exploitation has been identified, and the EPSS score is low (0.13%).
Broken CSRF token enforcement across 23 Regular Labs AJAX-based Joomla extensions allows authenticated lower-privileged users to directly invoke privileged endpoints, or allows any attacker to perform those operations via a cross-site request forgery attack against an authenticated victim. The affected surface spans virtually the entire Regular Labs extension portfolio, from Advanced Module Manager through Sourcerer, covering all versions from 1.0.0 up to per-extension maximums. No public exploit or active exploitation has been confirmed; EPSS is 0.13%, consistent with the UI:R requirement that prevents mass automated attack.
Cross-site request forgery in the Cache Cleaner extension for Joomla allows an authenticated administrator with cache-management permission to be tricked into performing unauthorized URL purges due to inconsistent token validation. Affected versions 1.0.0 through 9.7.6 may experience limited confidentiality and integrity compromise. No public exploit or active exploitation has been identified, and the EPSS score is low (0.13%).