Security Advisory

CVE-2026-60024

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-17 15:47:09
Last updated 2026-08-12 13:57:09
Assigner Joomla
CVSS score 9.8
State PUBLISHED

Description

Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.