CVE-2026-60025 in Events Booking

요약

\~에 의해 MITRE • 2026. 07. 17.

The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 책임이 있는: Joomla
• 예약하다: 2026. 07. 08.
• 공개: 2026. 07. 17.
• 모더레이션: 수락
• 항목: VDB-379847
• CPE: 준비됨
• CWE: CWE-352 (확인됨)
• CVSS: 4.3 (VulDB)
• EPSS: 0.00000
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-60025
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-60025
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-60025/