CVE-2026-100747: Svenbluege.de Event Gallery For Joomla

Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name.

Affected products

Published 2026-09-27. Last modified 2026-09-30.