Boletines de Vulnerabilidades

CVE-2026-60025

   
Software afectado JOOMLA
 
The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-60025