Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2026-100747

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Joomla

Description

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

svenbluege.de Event Gallery for Joomla

Default version status: unaffected

  • 1.0.0-6.0.0affected

References