CVE-2026-102777Medium 6.3Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.00.3%
CVE-2026-102778Medium 5.3Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0<0.1%
CVE-2026-102776Medium 5.1Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0<0.1%
CVE-2026-100748Medium 6.9Joomla Extension - svenbluege.de - CSRF in various cart actions in Event Gallery extension < 6.5.00.1%
CVE-2026-97164High 7.0Joomla Extension - svenbluege.de - Path Traversal in Clear Cache task in Event Gallery extension < 6.5.00.3%
CVE-2026-100747Medium 5.1Joomla Extension - svenbluege.de - CSRF in image upload in Event Gallery extension < 6.5.00.1%
CVE-2026-100749Medium 5.1Joomla Extension - svenbluege.de - CSRF in backend cleanup actions in Event Gallery extension < 6.5.0<0.1%
CVE-2026-97165Medium 5.3Joomla Extension - svenbluege.de - Reflected XSS and open redirect in Event Gallery extension < 6.5.00.1%