Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: joomdonation.com Clear all filters
TI-2026-45023 CVE-2026-63047 · GHSA-7hfj-8497-9m6v

Improper access control in joomdonation.com Events Booking extension for Joomla

Priority LOW 39

Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00394 Published 2026-07-22 No fix listed CWE-284
TI-2026-41867 CVE-2026-58149 · GHSA-946m-vcxj-cf9w

Information disclosure in joomdonation.com Events Booking extension for Joomla

Priority LOW 30

Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and em…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00345 Published 2026-07-17 No fix listed CWE-200
TI-2026-41650 CVE-2026-57832 · GHSA-96p8-29r9-pwjw

SQL injection in joomdonation.com EDocman extension for Joomla

Priority MEDIUM 44

Joomla Extension - joomdonation.com - Unauthenticated blind SQL injection in EDocman < 3.9 - The Joomla extension EDocman is vulnerable to an unauthenticated SQL injection.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00401 Published 2026-07-15 No fix listed CWE-89