Skip to content
OpenAdvisories

Vendor

svenbluege.de

8 known vulnerabilities.

Products

Event Gallery for Joomla 8
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-102777

    Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0

    Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth…

    svenbluege.de Event Gallery for Joomla Web / CMS
  • Medium 5.3
    CVE-2026-102778

    Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0

    Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a shared image link opens (the share mini page of the front end) can link the article the image was shared from when…

    svenbluege.de Event Gallery for Joomla Web / CMS
  • Medium 5.1
    CVE-2026-102776

    Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0

    Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setting the default payment method, shipping…

    svenbluege.de Event Gallery for Joomla Web / CMS
  • Medium 6.9
    CVE-2026-100748

    Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0

    Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0

    svenbluege.de Event Gallery for Joomla Web / CMS
  • Medium 5.1
    CVE-2026-100747

    Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0

    Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name.

    svenbluege.de Event Gallery for Joomla Web / CMS
  • Medium 5.1
    CVE-2026-100749

    Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0

    Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted.

    svenbluege.de Event Gallery for Joomla Web / CMS
  • Medium 5.3
    CVE-2026-97165

    Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0

    Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” parameter is base64-decoded and written to the “Back” link without being validated.

    svenbluege.de Event Gallery for Joomla Web / CMS