CSRF Vulnerability in Event Gallery Extension by Joomla
CVE-2026-100748

6.9MEDIUM

Key Information:

Vendor

Svenbluege.de

Status
Event Gallery For Joomla
Vendor
CVE Published:
27 September 2026

What is CVE-2026-100748?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Event Gallery extension for Joomla, allowing attackers to perform unauthorized actions on behalf of authenticated users. This flaw affects versions prior to 6.5.0, and if exploited, could lead to unwanted modifications in cart actions without user consent. It's crucial for Joomla users to update the extension to secure their web applications against potential exploits.

Affected Version(s)

Event Gallery for Joomla 1.0.0-6.0.0

References

https://www.svenbluege.de/
product

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.