Medium severityNVD Advisory· Published Sep 27, 2026

CVE-2026-100749

Description

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted.

Affected products

Joomla/Event Galleryllm-create
Range: <6.5.0

Patches

Vulnerability mechanics

References

www.svenbluege.denvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000