Back to overview

CVE-2026-63047

Description
The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information.

Metadata

CVE ID
CVE-2026-63047
State
PUBLISHED
Assigner
Joomla
Reserved
2026-07-15 08:12 UTC
Published
2026-07-22 07:05 UTC
Last updated
2026-07-22 07:17 UTC
Primary CWE
CWE-284
CWE-284 Improper Access Control
Vendor / Product
joomdonation.com / Events Booking extension for Joomla
Sources
cve.org  ·  NVD

Severity & Metrics

No CVSS data available.

Affected products (1)
VendorProductPlatformVersions
joomdonation.com Events Booking extension for Joomla 5.0-5.8.1
Weakness (CWE)
CWESourceDescription
CWE-284 cna CWE-284 Improper Access Control
Back to overview