CVE-2026-60025

Description

The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.

References

• https://joomdonation.com/joomla-extensions/events-booking-joomla-events-registration.html