CVE Explorer

CVE-2026-63265

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:493d2e7338a234a7a42d8d6bfe2cc8d6d72754b7a050a47882a9a7b44645dddc

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 23 assertions

{"defaultStatus":"unaffected","product":"Articles Anywhere extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-18.0.2"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Regular Labs Extension Manager extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-9.2.5"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/10

{"defaultStatus":"unaffected","product":"Snippets extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-9.3.10"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/18

{"defaultStatus":"unaffected","product":"Content Templater extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-13.0.0"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/7

{"defaultStatus":"unaffected","product":"CDN for Joomla extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-7.3.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/5

{"defaultStatus":"unaffected","product":"Email Protector extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-6.3.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/9

{"defaultStatus":"unaffected","product":"Better Frontend Link extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-2.2.5"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/3

{"defaultStatus":"unaffected","product":"Advanced Module Manager extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-11.0.1"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"Tooltips extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-9.4.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/20

{"defaultStatus":"unaffected","product":"GeoIP extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-6.3.8"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/11

{"defaultStatus":"unaffected","product":"Sourcerer extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-12.2.8"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/19

{"defaultStatus":"unaffected","product":"IP Login extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-6.2.5"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/12

{"defaultStatus":"unaffected","product":"Keyboard Shortcuts extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-3.2.5"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/13

{"defaultStatus":"unaffected","product":"Articles Field extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-4.7.1"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/2

{"defaultStatus":"unaffected","product":"DB Replacer extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-8.2.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/8

{"defaultStatus":"unaffected","product":"ReReplacer extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-15.0.3"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/17

{"defaultStatus":"unaffected","product":"Modals extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-15.0.0"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/14

{"defaultStatus":"unaffected","product":"What? Nothing! extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-17.2.5"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/22

{"defaultStatus":"unaffected","product":"Cache Cleaner extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-9.7.6"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/4

{"defaultStatus":"unaffected","product":"Conditional Content extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-6.0.0"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/6

{"defaultStatus":"unaffected","product":"Users Anywhere extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-1.2.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/21

{"defaultStatus":"unaffected","product":"Quick Index extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-4.3.6"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/16

{"defaultStatus":"unaffected","product":"Modules Anywhere extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-8.4.1"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/15

cwe · 2 assertions

{"cweId":"CWE-352","description":"CWE-352 Cross-Site Request Forgery (CSRF)","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-284","description":"CWE-284 Improper Access Control","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/problemTypes/0/descriptions/1

Affected products and versions

23 source assertions

{"defaultStatus":"unaffected","product":"Articles Anywhere extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-18.0.2"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Regular Labs Extension Manager extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-9.2.5"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/10

{"defaultStatus":"unaffected","product":"Snippets extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-9.3.10"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/18

{"defaultStatus":"unaffected","product":"Content Templater extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-13.0.0"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/7

{"defaultStatus":"unaffected","product":"CDN for Joomla extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-7.3.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/5

{"defaultStatus":"unaffected","product":"Email Protector extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-6.3.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/9

{"defaultStatus":"unaffected","product":"Better Frontend Link extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-2.2.5"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/3

{"defaultStatus":"unaffected","product":"Advanced Module Manager extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-11.0.1"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/0

{"defaultStatus":"unaffected","product":"Tooltips extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-9.4.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/20

{"defaultStatus":"unaffected","product":"GeoIP extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-6.3.8"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/11

{"defaultStatus":"unaffected","product":"Sourcerer extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-12.2.8"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/19

{"defaultStatus":"unaffected","product":"IP Login extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-6.2.5"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/12

{"defaultStatus":"unaffected","product":"Keyboard Shortcuts extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-3.2.5"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/13

{"defaultStatus":"unaffected","product":"Articles Field extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-4.7.1"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/2

{"defaultStatus":"unaffected","product":"DB Replacer extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-8.2.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/8

{"defaultStatus":"unaffected","product":"ReReplacer extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-15.0.3"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/17

{"defaultStatus":"unaffected","product":"Modals extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-15.0.0"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/14

{"defaultStatus":"unaffected","product":"What? Nothing! extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-17.2.5"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/22

{"defaultStatus":"unaffected","product":"Cache Cleaner extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-9.7.6"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/4

{"defaultStatus":"unaffected","product":"Conditional Content extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-6.0.0"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/6

{"defaultStatus":"unaffected","product":"Users Anywhere extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-1.2.7"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/21

{"defaultStatus":"unaffected","product":"Quick Index extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-4.3.6"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/16

{"defaultStatus":"unaffected","product":"Modules Anywhere extension for Joomla","vendor":"regularlabs.com","versions":[{"status":"affected","version":"1.0.0-8.4.1"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/affected/15

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/adp/0/metrics/0/cvssV3_1

CWE assertions

2 source assertions

{"cweId":"CWE-352","description":"CWE-352 Cross-Site Request Forgery (CSRF)","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/problemTypes/0/descriptions/0

{"cweId":"CWE-284","description":"CWE-284 Improper Access Control","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/problemTypes/0/descriptions/1

Source references

1 source assertion

{"tags":["product"],"url":"https://regularlabs.com/"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c908ca6e9b6c4fd026e44093cab84b2530a436e41e14cdc01f9dd888c1921942 · sha256:57a2cf9b0a245cf7… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer