Medium severity4.3NVD Advisory· Published Sep 27, 2026· Updated Oct 27, 2026
CVE-2026-100749
CVE-2026-100749
Description
Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <6.5.0
- Range: <6.5.0
Patches
Vulnerability mechanics
References
1- www.svenbluege.denvdProduct
News mentions
1- Joomla Extensions: Batch of 13 Vulnerabilities Includes Critical RCE, SQLi, and XSSVypr Intelligence · Sep 28, 2026