CVE-2026-100749: Svenbluege.de Event Gallery For Joomla

Medium severity, CVSS 5.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted.

Affected products

Published 2026-09-27. Last modified 2026-09-30.