CVE-2026-63684 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Content Templater extension for Joomla by regularlabs.com. The vulnerability arises from inconsistent CSRF token validation and privilege checks in multiple administrative import/export actions, editor popups, and other backend operations. This inconsistency allows unauthorized backend users or attackers leveraging CSRF attacks to potentially expose, create, or modify extension configurations and items. The affected versions range from 1.0.0 to 13.0.0. There is no vendor advisory or patch information currently available, and no known exploits in the wild have been reported.

Successful exploitation could lead to unauthorized exposure, creation, or modification of extension configuration and items within the Joomla backend. This could compromise the integrity and confidentiality of the affected system's configuration and data. The CVSS score of 8.8 indicates a high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, administrators should limit access to the Joomla backend to trusted users only and consider implementing additional CSRF protections or monitoring for suspicious administrative actions. Avoid using affected versions in sensitive environments if possible.