CVE-2026-60025

UNKNOWN NVD

CVSS Score 0

Severity UNKNOWN

Published Jul 17, 2026

Vendor unknown

Description

The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.