CVE-2026-60025 — Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0

CVE-2026-60025

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 PUBLISHED

Description (CNA)

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.

Affected (CNA)

Vendor / product	Versions
joomdonation.com / Events Booking extension for Joomla	affected 1.0-5.8.0

CWE

CWE-352

References

https://joomdonation.com/joomla-extensions/events-booking-joomla-events-registration.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.