CVE-2026-100747 — Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0
Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event …
Published: 2026-09-27 · CVSS: 5.1 · CVSS 4.0
Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7