Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2026-60025
created 6 days, 2 hours ago Activity log
  • Created & dismissed (no matching packages found) suggestion 6 days, 2 hours ago
Joomla Extension - joomdonation.com - User enumeration in Events Booking < 5.8.0

The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.

Affected products

Events Booking extension for Joomla
  • ==1.0-5.8.0