CVE Catalog
CVE-2026-60024
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
The Joomla extension Events Booking prior to version 5.8.0 by default allows unauthenticated users to upload media assets. This is an insecure default configuration.
Risk Assessment
Risk of unauthorized upload of malicious files to the server, potentially leading to site compromise.
Recommendation
Update the Events Booking extension to version 5.8.0 or later.
Original NVD description (English source)
Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.