CVE-2026-60024

CVE-2026-60024: Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0

Vendor Joomdonation.com

Product Events Booking extension for Joomla

Weakness CWE-1188

Published July 17, 2026

Last update July 23, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0 - The Joomla extension Events Booking prior version 5.8.0 did by default allow unauthenticated users to upload media assets.

Key dates

02Disclosure timeline

July 17, 2026 CVE published

July 23, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-60024 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1188.html AskarLabs — CWE-1188 write-up Insecure Default Initialization of Resource

Related vulnerabilities

CVE-2026-60024: Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0

01Description

02Disclosure timeline

03References

04Related CVE