Vulnerability Details CVE-2026-100747
Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 3.4%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2026-100747
-
cpe:2.3:a:svenbluege:event_gallery:*