← Database

CVE-2026-60024

CRITICAL CVSS: 9.8 Published: 2026-07-17 Modified: 2026-07-23

Description

Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.

Affected Platforms

Unknown

Weakness Type

CWE-1188

References