CVE-2026-60024

The Events Booking extension for Joomla, prior to version 5.8.0, is vulnerable due to its insecure default configuration that permits unauthenticated users to upload media assets. This flaw could lead to unauthorized access and potential exploitation of the web application, posing a critical risk to the integrity and security of the affected systems. Joomla administrators and users of the Events Booking extension should prioritize upgrading to version 5.8.0 or later to mitigate this vulnerability.