CVE-2026-60024

Description

The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.

References

• https://joomdonation.com/joomla-extensions/events-booking-joomla-events-registration.html