Read the docs
TI-2026-67749 Aliases CVE-2026-102778GHSA-r52h-f94x-72vr

Cross-site scripting and open redirect in Event Gallery for Joomla

Priority LOW 29CWE-352Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Tampering, Spoofing
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-352 and CWE-601.

Summary

Event Gallery for Joomla before 6.6.0 by svenbluege.de has a flaw on its share mini page. The page prints the article address from a shared link into the page without checking or escaping it, which is an open redirect (CWE-601). A remote attacker can use a prepared link to run a script in the session of a visitor who opens it or to send that visitor to another web site.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a shared image link opens (the share mini page of the front end) can link the article the image was shared from when the option "Share article links" is on. It took the address of the article from the shared link and printed it into the page without checking or escaping it; with the link type "Image Page with Redirect" it followed the address at once. A prepared link could therefore run a script in the page, in the session of the visitor who opened it, or send the visitor to another web site. Nothing on the server is changed or read by the server.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00091 0th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
svenbluege.deEvent Gallery for Joomla1.0.0-6.5.0—No fix listedCNA
  • Event Gallery for Joomla Vendorsvenbluege.de Affected 1.0.0-6.5.0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:svenbluege:event_gallery:*:*:*:*:*:joomla\!:*:*before 6.6.0Vulnerablesvenbluege.de
  • cpe:2.3:a:svenbluege:event_gallery:*:*:*:*:*:joomla\!:*:* Versions before 6.6.0 Vulnerable ·svenbluege.de

Remediation

The sources list no fixed version for Event Gallery for Joomla.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

  1. 2026-10-05 Threatist record created from CVE-2026-102778
  2. 2026-10-05 CISA SSVC decision points changed
  3. 2026-10-05 Alias added: GHSA-r52h-f94x-72vr
  4. 2026-10-06 Affected versions changed · CNA
  5. 2026-10-15 CVSS score added · NVD

References

Other 1

  • TI-2026-64889 Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0 CVSS 4.0MEDIUM 6.9
  • TI-2026-63956 Joomla Extension - svenbluege.de - Path Traversal in Clear Cache task in Event Gallery extension < 6.5.0 CVSS 4.0HIGH 7.0
  • TI-2026-63957 Open redirect in svenbluege.de Event Gallery for Joomla CVSS 4.0MEDIUM 5.3
  • TI-2026-67754 Server-side request forgery in Event Gallery for Joomla picker CVSS 4.0MEDIUM 6.3
  • TI-2026-67748 Event Gallery for Joomla: CSRF in back-end list tasks CVSS 4.0MEDIUM 5.1
  • TI-2026-64890 Cross-site request forgery in svenbluege.de Event Gallery for Joomla CVSS 4.0MEDIUM 5.1
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences