CVE-2026-65757 describes a vulnerability in the Modules Anywhere extension for Joomla, where inconsistent CSRF token validation and privilege checks in the editor popup allow authenticated users without the necessary module permissions or valid CSRF tokens to access restricted module data. This vulnerability is classified under CWE-352 (Cross-Site Request Forgery) and CWE-284 (Improper Access Control). The CVSS v3.1 base score is 8.1, indicating high severity, with network attack vector, low attack complexity, and no user interaction required. The vulnerability affects versions 1.0.0 through 8.4.1 of the extension. No vendor advisory or patch information is currently available.

Exploitation of this vulnerability could allow an authenticated user to bypass access controls and CSRF protections, potentially exposing sensitive module data that should be restricted. The impact includes high confidentiality and integrity loss but does not affect availability. This could lead to unauthorized disclosure and modification of module content within Joomla sites using the affected extension versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Modules Anywhere extension editor popup to trusted users only and monitor for suspicious activity. Avoid granting unnecessary module permissions to users. Follow updates from regularlabs.com for patch availability.