Approved changes feed: RSS · Atom

cpe:2.3:a:joomdonation.com:events_booking_extension_for_joomla:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJoomdonation.Com (1a6a0fdc-3ac2-5aae-bc9f-1fce78945e38)
ProductEvents Booking Extension For Joomla (280f8c78-b291-5781-aae6-3b248ea82e0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-63047 vulnerable 2026-07-29 01:06:19.260928 Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1
Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information.
Published: 2026-07-22T07:05:06.645Z
Updated: 2026-08-12T13:57:58.941Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60025 vulnerable 2026-07-29 01:03:23.707055 Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0
Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.
Published: 2026-07-17T15:44:32.443Z
Updated: 2026-08-12T13:53:28.820Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60024 vulnerable 2026-07-29 01:03:23.706909 Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0
Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.
Published: 2026-07-17T15:47:09.871Z
Updated: 2026-08-12T13:57:09.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-58149 vulnerable 2026-07-29 01:03:16.654343 Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0
Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses.
Published: 2026-07-17T15:45:07.385Z
Updated: 2026-08-12T13:54:27.048Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.