Events Booking Extension For Joomla
Monthly
The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.
The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses.
The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.
The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.
The Joomla extension Events Booking is vulnerable to an unauthenticated user enumeration that allows to retrieve account usernames and email addresses.
The Joomla extension Events Booking prior version 5.8.0 had an frontend file upload endpoint that lacked CSRF protection.