Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2026-97164

Joomla Extension - svenbluege.de - Path Traversal in Clear Cache task in Event Gallery extension < 6.5.0

Description

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extension < 6.5.0 - Using the `images` parameter of the `cache.process` task, you can recursively delete any directories that the web server is authorized to write to.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

svenbluege.de Event Gallery for Joomla

Default version status: unaffected

  • 1.0.0-6.0.0affected

References