CVE-2026-100749

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted.

  • Published Sep 27, 2026
  • CVSS 5.1 medium
  • 0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-100749 at the National Vulnerability Database