Advisories · Technology
svenbluege.de Event Gallery for Joomla.
Every CVE that names svenbluege.de Event Gallery for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0
- svenbluege.de Event Gallery for Joomla
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0
- svenbluege.de Event Gallery for Joomla
- Cross-site request forgery (CSRF)
- Open redirect
- CVSS 5.1 Medium
Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0
- svenbluege.de Event Gallery for Joomla
- Cross-site request forgery (CSRF)
- CVSS 6.9 Medium
Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.0
- svenbluege.de Event Gallery for Joomla
- Cross-site request forgery (CSRF)
- CVSS 7.0 High
Joomla Extension - svenbluege.de - Path Traversal in Clear Cache task in Event Gallery extension < 6.5.0
- svenbluege.de Event Gallery for Joomla
- Path traversal
- CVSS 5.1 Medium
Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.0
- svenbluege.de Event Gallery for Joomla
- Cross-site request forgery (CSRF)
- CVSS 5.1 Medium
Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0
- svenbluege.de Event Gallery for Joomla
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.0
- svenbluege.de Event Gallery for Joomla
- Cross-site scripting (XSS)
- Open redirect