Threat database

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos account. The task took the address to fetch from the request without checking it and asked for no form token. A prepared page on another web site could therefore make the server send the access token of the account to any address, or fetch addresses inside the server's network, in the name of a logged in administrator; a back-end user with the permission "Manage" could do the same directly. The token is valid for about an hour and reaches what the picker session of the account reaches.

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a shared image link opens (the share mini page of the front end) can link the article the image was shared from when the option "Share article links" is on. It took the address of the article from the shared link and printed it into the page without checking or escaping it; with the link type "Image Page with Redirect" it followed the address at once. A prepared link could therefore run a script in the page, in the session of the visitor who opened it, or send the visitor to another web site. Nothing on the server is changed or read by the server.

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Event Gallery extension for Joomla versions up to 6.6.0. This flaw allows an attacker to perform certain backend list tasks without proper form token validation, potentially changing settings such as payment method, shipping method, image type, order status, watermark, event shop status, main image selection, and image sorting. The vulnerability does not allow deletion or reading of data, nor does it affect orders.

CVE-2026-100748 is a Cross-Site Request Forgery (CSRF) vulnerability in the Event Gallery extension for Joomla by svenbluege.de. It affects versions 1.0.0 through 6.0.0 and allows unauthorized commands to be transmitted from a trusted user. The vulnerability has a medium severity with a CVSS 4.0 base score of 6.9. No official patch or vendor advisory is currently available.

CVE-2026-100747 is a medium severity Cross-Site Request Forgery (CSRF) vulnerability in the Event Gallery extension for Joomla by svenbluege.de. It affects versions 1.0.0 through 6.0.0. The vulnerability occurs due to the lack of a CSRF token check in the image upload functionality, allowing an attacker to upload files to an event and potentially overwrite existing files with the same name.

CVE-2026-97164 is a high-severity vulnerability in the Event Gallery extension for Joomla by svenbluege.de. Versions from 1.0.0 through 6.0.0 are affected. The flaw allows an authenticated user to perform arbitrary recursive deletion of directories writable by the web server via the 'images' parameter in the 'cache.process' task. This improper limitation of pathname to restricted directories (CWE-22) can lead to significant data loss or service disruption.

CVE-2026-100749 is a Cross-Site Request Forgery (CSRF) vulnerability in the backend cleanup actions of the Event Gallery extension for Joomla by svenbluege.de. This issue affects versions from 1.0.0 up to 6.0.0. The vulnerability allows unauthorized requests to trigger deletion of orphaned file entries and shopping carts older than 30 days. The CVSS 4.0 base score is 5.1, indicating a medium severity level.

A medium severity vulnerability (CVE-2026-97165) affects the Event Gallery extension for Joomla by svenbluege.de. Versions 1.0.0 through 6.0.0 are impacted by an open redirect issue where a base64-decoded 'return' parameter is used without validation, allowing redirection to untrusted sites. This vulnerability is categorized as CWE-601 (Open Redirect) and also involves reflected cross-site scripting (CWE-79).