Vulnerability Bulletins |
CVE-2026-100747 |
|
| Affected software | JOOMLA |
| Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-100747 | |