Threats tagged 'ghsa-cgxg-f4wg-xm8f'

1 threat

Threats tagged 'ghsa-cgxg-f4wg-xm8f'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.1%	CVE-2026-100747Event Gallery for Joomla · Cross-Site Request Forgery (CSRF) Medium5.1EPSS 0.1%2026-09-27CVE Database V5CVE-2026-100747 CVE-2026-100747 is a medium severity Cross-Site Request Forgery (CSRF) vulnerability in the Event Gallery extension for Joomla by svenbluege.de. It affects versions 1.0.0 through 6.0.0. The vulnerability occurs due to the lack of a CSRF token check in the image upload functionality, allowing an attacker to upload files to an event and potentially overwrite existing files with the same name. EPSS 0.1%Vulnerability svenbluege.de #cwe-352 #ghsa-cgxg-f4wg-xm8f	CVE Database V5	2026-09-27

Showing 1–1 of 1 result