CVE-2026-100749

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted.

Score

CVSS 4.0 5.1 Medium

Status

Analyzed - security@joomla.org

Published

2026-09-27

Last modified

2026-10-27

Weaknesses

CWE-352

Affected products

• Event Gallery (Svenbluege)
• Event Gallery For Joomla (Svenbluege.de)

References

• https://www.svenbluege.de/