CVE-2026-100747

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name.

  • Published Sep 27, 2026
  • CVSS 5.1 medium
  • 0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-100747 at the National Vulnerability Database