NetSight
high8.8

CVE-2026-60025

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file…

Impact

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.

Affected products

ProductAffected versions
Events Booking
before 5.8.0

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References