CVE-2026-100747 – Joomla Extension – svenbluege.de – CSRF in image upload in Event Gallery extension < 6.5.0

Joomla Extension – svenbluege.de – CSRF in image upload in Event Gallery extension < 6.5.0 – Due to lack of an CSRF token check, a third-party site can upload files to an event and overwrite existing files with the same name.