CVE-2026-100749: Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0
Published Sep 27, 2026
·Updated
Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted.
Affected Software
1 affected component
svenbluege.de Event Gallery<6.5.0
Event History
Sep 27, 2026
CVE Published
via MITRE·11:45 AM
Data Sourced
via MITRE·11:45 AM
DescriptionWeakness
Data Sourced
via NVD·12:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What data can be deleted if this issue is exploited?
The affected backend cleanup actions delete orphaned file entries and shopping carts older than 30 days.
2
Which Event Gallery versions are affected?
Event Gallery versions earlier than 6.5.0 are affected.