Events Booking extension for Joomla vulnerabilities
3 known vulnerabilities in Events Booking extension for Joomla from Joomdonation.com. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Events Booking extension for Joomla: Improper Access Control
Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information
- 8.8 High severity
Events Booking extension for Joomla: Cross-Site Request Forgery
Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.
- 9.8 Critical severity
Events Booking extension for Joomla: Initialization of a Resource with an Insecure Default
Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.