svenbluege.de Event Gallery for Joomla

Latest vulnerabilities

• CVE-2026-102777 CVSS 6.3 medium Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google…
• CVE-2026-102778 CVSS 5.3 medium Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The…
• CVE-2026-102776 CVSS 5.1 medium Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight…
• CVE-2026-97165 CVSS 5.3 medium Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” parameter is…
• CVE-2026-97164 CVSS 7.0 high Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extension < 6.5.0 - Using…
• CVE-2026-100749 CVSS 5.1 medium Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and…
• CVE-2026-100748 CVSS 6.9 medium Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0
• CVE-2026-100747 CVSS 5.1 medium Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a…