Media Upload Vulnerability in Events Booking Plugin by Joomla
CVE-2026-60024

Currently unrated

Key Information:

Vendor: Joomdonation.com
Status: Events Booking Extension For Joomla
Vendor: CVE Published:; 17 July 2026

🔔 Create Joomdonation.com Vulnerability Alert

What is CVE-2026-60024?

The Events Booking plugin for Joomla, prior to version 5.8.0, has a significant security weakness that permits unauthenticated users to upload media assets. This vulnerability can lead to potential malicious use and compromise the integrity of websites utilizing this extension. Website administrators are advised to update to the latest version to mitigate the risk associated with unauthorized media uploads.

Affected Version(s)

Events Booking extension for Joomla 1.0-5.8.0

References

https://joomdonation.com/joomla-extensions/events-booking...

product

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 17, 2026
Vulnerability Reserved
Jul 8, 2026

Credit

Phil Taylor

CVE-2026-60024 Data

JSON