CVE-2026-100748

Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension 6.5.0...

EUVD-2026-87932

Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension 6.5.0...

Improper Enforcement of Behavioral Workflow

Overview sylius/sylius is a platform for PHP, based on Symfony framework. Affected versions of this package are vulnerable to Improper Enforcement of Behavioral Workflow through the FormComponent process. An attacker can irreversibly modify or delete completed order data by performing actions suc...