Read the docs

svenbluege.de

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

svenbluege.de records in CISA KEV

No svenbluege.de vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Event Gallery 8 records LOW

Records

8 records

TI-2026-63956 CVE-2026-97164 · GHSA-v9wv-4x5c-j6q9

Joomla Extension - svenbluege.de - Path Traversal in Clear Cache task in Event Gallery extension < 6.5.0

Priority LOW 33

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extension < 6.5.0 - Using the `images` parameter of the `cache.process` task, you can recursively delete any…

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00317 Published 2026-09-27 No fix listed CWE-22
TI-2026-67749 CVE-2026-102778 · GHSA-r52h-f94x-72vr

Cross-site scripting and open redirect in Event Gallery for Joomla

Priority LOW 29

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a shared image link opens (the share mini page of the front end) can link the…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00091 Published 2026-10-05 No fix listed CWE-352
TI-2026-63957 CVE-2026-97165 · GHSA-3g59-55jw-r38v

Open redirect in svenbluege.de Event Gallery for Joomla

Priority LOW 29

Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0 - The “return” parameter is base64-decoded and written to the “Back” link without being validated.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00141 Published 2026-09-27 No fix listed CWE-601
TI-2026-67754 CVE-2026-102777 · GHSA-2gw6-8g27-32rm

Server-side request forgery in Event Gallery for Joomla picker

Priority LOW 28

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked im…

CVSS 4.0MEDIUM 6.3 Network No auth User interaction EPSS 0.00273 Published 2026-10-05 No fix listed CWE-918
TI-2026-67748 CVE-2026-102776 · GHSA-vp74-cp65-rffg

Event Gallery for Joomla: CSRF in back-end list tasks

Priority LOW 28

Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight tasks which the buttons of the back-end lists call did not check the form token: setti…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00098 Published 2026-10-05 No fix listed CWE-352
TI-2026-64890 CVE-2026-100749 · GHSA-2hrp-jfc8-328g

Cross-site request forgery in svenbluege.de Event Gallery for Joomla

Priority LOW 22

Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0 - Only orphaned file entries and shopping carts that are older than 30 days will be deleted.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00095 Published 2026-09-27 No fix listed CWE-352
TI-2026-64888 CVE-2026-100747 · GHSA-cgxg-f4wg-xm8f

Cross-site request forgery in svenbluege.de Event Gallery for Joomla

Priority LOW 22

Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0 - Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same…

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00109 Published 2026-09-27 No fix listed CWE-352
Open these records in search →