High severity8.8NVD Advisory· Published Jul 17, 2026· Updated Jul 23, 2026

CVE-2026-60025

Description

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.

Affected products

Joomla/Events Bookingllm-fuzzy
Range: <5.8.0
Joomdonation.com/Events Bookingllm-fuzzy
Range: <5.8.0

Patches

Vulnerability mechanics

References

joomdonation.com/joomla-extensions/events-booking-joomla-events-registration.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000