Skip to content
OpenAdvisories
High · 7.5 CVE-2026-63047 EUVD-2026-47617GHSA-7hfj-8497-9m6v

Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1

Published Jul 22, 2026 · Updated Aug 12, 2026 · Assigned by Joomla

Description

Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information.

Affected products

VendorProductAffectedFixed
joomdonation.com Events Booking extension for Joomla 5.0-5.8.1 —

References