CVE-2026-97164

The Event Gallery extension for Joomla versions prior to 6.5.0 is vulnerable to authenticated arbitrary path deletion through the `clear cache` task, allowing attackers to recursively delete any directories writable by the web server using the `images` parameter. This could lead to significant data loss and disruption of service for affected Joomla installations. Web administrators and security teams managing Joomla sites with this extension should prioritize patching to mitigate potential exploitation.