CSRF Vulnerability in Events Booking Extension for Joomla by JoomlaDonation
CVE-2026-60025

Currently unrated

Key Information:

Vendor: Joomdonation.com
Status: Events Booking Extension For Joomla
Vendor: CVE Published:; 17 July 2026

🔔 Create Joomdonation.com Vulnerability Alert

What is CVE-2026-60025?

The Events Booking extension for Joomla, prior to version 5.8.0, contains a security flaw in its frontend file upload functionality due to insufficient CSRF protection. This vulnerability may allow an attacker to exploit the system by tricking users into uploading malicious files, potentially compromising sensitive data and security integrity of the Joomla site.

Affected Version(s)

Events Booking extension for Joomla 1.0-5.8.0

References

https://joomdonation.com/joomla-extensions/events-booking...

product

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 17, 2026
Vulnerability Reserved
Jul 8, 2026

Credit

Phil Taylor

CVE-2026-60025 Data

JSON