CVE-2026-100749CWE-352csrf

CVE-2026-100749

published September 27, 2026

CVSS
5.1
EPSS
0%
Percentile
3.5
In the wild
Unconfirmed
What it is

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted.

The record
Technical detail
CVSS
5.1 · NONE
CVSS v4.0
5.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00146 · 3.5th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2026-09-27T16:17Z
References (1)
https://www.svenbluege.de/ · [email protected]
EPSS history
Timeline
  • 29 SEP 03:24Z
    EPSS moved — → 0%
    epss
  • 27 SEP 11:45Z
    Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0
    cvelistv5