[ Vendor · 8 CVEs ]

svenbluege.de

CVEs affecting svenbluege.de published in the last 30 days, plus any svenbluege.de CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-102777 5 Oct 2026 CVSS 6.5 svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos…
CVE-2026-102776 5 Oct 2026 CVSS 4.3 svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight tasks which the…
CVE-2026-102778 5 Oct 2026 CVSS 6.1 svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a…
CVE-2026-97165 27 Sep 2026 CVSS 5.3 svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” parameter is base64-decoded and…
CVE-2026-100748 27 Sep 2026 CVSS 8.8 svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0
CVE-2026-100749 27 Sep 2026 CVSS 5.1 svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts…
CVE-2026-97164 27 Sep 2026 CVSS 7.0 svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extension < 6.5.0 - Using the…
CVE-2026-100747 27 Sep 2026 CVSS 6.5 svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site…