中文

// CVE · PUBLISHED 2026-07-17

CVE-2026-60024

joomdonation.com / Events Booking extension for Joomla

9.8 · CVSS 3.1Critical

Description

Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.

References

Related CVEs

  • CVE-2026-62415joomdonation.com / Membership Pro extension for JoomlaCVSS 9.1
  • CVE-2026-8297Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. / GisLab Laboratory Management SystemCVSS 9.8
  • CVE-2026-12694Vimesoft Inc. / Enterprise Video PlatformCVSS 9.1
  • CVE-2026-12693Vimesoft Inc. / Enterprise Video PlatformCVSS 9.4
  • CVE-2026-12692Vimesoft Inc. / Enterprise Video PlatformCVSS 9.8
  • CVE-2026-15982CodeRevolution / Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation ToolkitCVSS 9.8
  • CVE-2026-62241MohibShaikh / clawvetCVSS 9.3
  • CVE-2026-62232getgrav / gravCVSS 9.1

← CVE Index: search every CVE from the last 30 days

This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.