CVE-2026-100748
Received Received - Intake

CSRF in Event Gallery Joomla Extension

Publication date: 2026-09-27

Last updated on: 2026-09-27

Assigner: Joomla! Project

Description
Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-27
Last Modified
2026-09-27
Generated
2026-09-27
AI Q&A
2026-09-27
EPSS Evaluated
N/A
NVD
CVE-2026-100748
EUVD
EUVD-2026-87932

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
svenbluege event_gallery to 6.5.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a Cross-Site Request Forgery (CSRF) issue in the Event Gallery Joomla extension versions before 6.5.0. It allows attackers to trick users into performing unintended actions in the cart, such as adding or removing items, without their consent.

Impact Analysis

An attacker could exploit this to manipulate a user's cart in the Event Gallery extension. This might lead to unauthorized purchases, data loss, or disruption of service for the user or the website.

Compliance Impact

The vulnerability involves CSRF in cart actions within the Event Gallery Joomla extension, which could allow unauthorized modifications to user carts or purchases. This may lead to unauthorized data access or transactions, potentially violating GDPR principles of data integrity and confidentiality if personal or payment data is exposed. However, specific compliance impacts are not detailed in the provided context.

Mitigation Strategies

Update the Event Gallery extension to version 6.5.0 or higher to address the CSRF vulnerability in cart actions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100748. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart