36 matches found
CVE-2026-60025 Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0
Joomla Extension - joomdonation.com - User enumeration in Events Booking 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection...
CVE-2026-60025
The Joomla extension Events Booking (prior version 5.8.0) by joomdonation.com is vulnerable to User enumeration because a frontend file upload endpoint lacks CSRF protection . This security flaw could allow an attacker to interact with the upload endpoint without proper authorization. No specific...
EUVD-2026-45198
The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection...
CVE-2026-60025 Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0
Joomla Extension - joomdonation.com - User enumeration in Events Booking 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection...
CVE-2026-60025
Joomla Extension - joomdonation.com - User enumeration in Events Booking 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection...
PT-2026-60787
Name of the Vulnerable Software and Affected Versions Events Booking versions prior to 5.8.0 Description The Joomla extension contains a frontend file upload endpoint that lacks Cross-Site Request Forgery CSRF protection. CSRF is a type of attack that tricks a victim into submitting a malicious...
CVE-2026-60024: Initialization of a Resource with an Insecure Default
Joomla Extension - joomdonation.com - Insecure default configuration Events Booking 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets...
CVE-2026-60025: Cross-Site Request Forgery (CSRF)
Joomla Extension - joomdonation.com - User enumeration in Events Booking 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection...
CVE-2026-58149: Exposure of Sensitive Information to an Unauthorized Actor
Joomla Extension - joomdonation.com - User enumeration in Events Booking 5.8.0 - The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses...
PT-2026-60785
Name of the Vulnerable Software and Affected Versions Events Booking versions prior to 5.8.0 Description The Joomla extension Events Booking contains a flaw that allows an unauthenticated user to perform user enumeration. This issue enables an attacker to retrieve account usernames and email...
PT-2026-60786
Name of the Vulnerable Software and Affected Versions Events Booking versions prior to 5.8.0 Description An insecure default configuration allows unauthenticated users to upload media assets. Recommendations Update to version 5.8.0 or later...
Events Booking, versions before 2.1.1
Joomdonation extensions, Information Disclosure Events Booking versions before 2.1.1 Resolution: update to 2.1.1 Update notice URL: http://joomdonation.com/forum/events-booking-general-discussion/50511-events-booking-version-2-1-1-released.html...
Events Booking, 1.6.7 and lower, (module: Search Events)
Events Booking 1.6.7 =Vulnerability: XSS Cross Site Scripting Extension Update Details This issue only affect the search module Search Events which comes with Events Booking. We released version 1.6.8 to address this issue...
Joomseller "Events Booking Pro" and "JSE Event" reflected XSS
---------------------------------------------------------------------------------------------- Joomseller "Events Booking Pro" and "JSE Event" reflected XSS ---------------------------------------------------------------------------------------------- + Software Link:...
Joomseller Events Booking Pro / JSE Event Cross Site Scripting
---------------------------------------------------------------------------------------------- Joomseller "Events Booking Pro" and "JSE Event" reflected XSS ---------------------------------------------------------------------------------------------- + Software Link:...
Joomla Joomseller Events Booking Pro 'info' Parameter XSS Vulnerability
Joomla Joomseller Event Booking Pro plugin is prone to xss vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...