CSRF Vulnerability in Event Gallery Extension by Svenbluege
CVE-2026-100749

5.1MEDIUM

Key Information:

Vendor

Svenbluege.de

Status
Event Gallery For Joomla
Vendor
CVE Published:
27 September 2026

What is CVE-2026-100749?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Event Gallery extension developed by Svenbluege, affecting versions prior to 6.5.0. This vulnerability allows attackers to perform backend cleanup actions, potentially leading to unauthorized deletion of orphaned file entries and shopping cart data that is older than 30 days.

Affected Version(s)

Event Gallery for Joomla 1.0.0-6.0.0

References

https://www.svenbluege.de/
product

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.