Veille CVE

Recherche « joomdonation.com Events Booking extension for Joomla »

4 CVE

Critique 1 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « joomdonation.com Events Booking extension for Joomla » ✕
  1. CVE-2026-63047 7.5 Élevée

    joomdonation.com Events Booking extension for Joomla

    Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information.

  2. CVE-2026-60025 8.8 Élevée

    joomdonation.com Events Booking extension for Joomla

    Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.

  3. CVE-2026-60024 9.8 Critique

    joomdonation.com Events Booking extension for Joomla

    Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.

  4. CVE-2026-58149 5.3 Moyenne

    joomdonation.com Events Booking extension for Joomla

    Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses.