Critical severity9.8NVD Advisory· Published Jul 17, 2026· Updated Jul 23, 2026

CVE-2026-60024

Description

Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.

Affected products

Joomla/Events Bookingllm-fuzzy
Range: <5.8.0

Patches

Vulnerability mechanics

References

joomdonation.com/joomla-extensions/events-booking-joomla-events-registration.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000