CVE-2026-63265: CWE-352 Cross-Site Request Forgery (CSRF) in regularlabs.com Advanced Module Manager extension for Joomla

The Advanced Module Manager extension for Joomla by regularlabs.com contains inconsistent enforcement of CSRF token validation and privilege checks on privileged AJAX endpoints. This inconsistency allows authenticated users with lower privileges or attackers leveraging CSRF attacks to invoke AJAX lookups or mutations beyond their authorized permissions. The vulnerability affects versions 1.0.0 through 11.0.1 and is classified under CWE-352 (Cross-Site Request Forgery) and CWE-284 (Improper Access Control). No vendor advisory or patch is currently available to address this issue.

Successful exploitation could allow an attacker to perform unauthorized actions via AJAX endpoints, potentially leading to full compromise of confidentiality, integrity, and availability of the affected Joomla extension. This includes unauthorized data access or modification through privilege escalation or CSRF attack vectors.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected AJAX endpoints to trusted users only and consider implementing additional CSRF protections at the application or web server level if possible.