{"schema_version":1,"title":"Joom Donation Events-Booking vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 4 vulnerabilities in Joom Donation Events-Booking: 0 in the last 7 days and 4 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-63047, was published on 22 July 2026.","url":"https://junglewise.ai/threats/technologies/events-booking","json_url":"https://junglewise.ai/threats/technologies/events-booking.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/events-booking","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":0,"all_time":4,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":4,"last_365_days":4},"latest":[{"cve":"CVE-2026-63047","cvss":0,"slug":"cve-2026-63047-joomdonation-events-booking-improper-access-control-in-invoice","title":"Joomdonation Events Booking improper access control in invoice downloads","severity":"info","exploited":false,"published_at":"2026-07-22T08:16:23.95+00:00","url":"https://junglewise.ai/threats/cve-2026-63047-joomdonation-events-booking-improper-access-control-in-invoice"},{"cve":"CVE-2026-60025","cvss":0,"slug":"cve-2026-60025-joomdonation-events-booking-csrf-in-frontend-file-upload","title":"JoomDonation Events Booking CSRF in frontend file upload","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.23+00:00","url":"https://junglewise.ai/threats/cve-2026-60025-joomdonation-events-booking-csrf-in-frontend-file-upload"},{"cve":"CVE-2026-60024","cvss":5.3,"slug":"cve-2026-60024-joomdonation-events-booking-insecure-default-media-upload","title":"Joomdonation Events Booking insecure default media upload permissions","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.113+00:00","url":"https://junglewise.ai/threats/cve-2026-60024-joomdonation-events-booking-insecure-default-media-upload"},{"cve":"CVE-2026-58149","cvss":0,"slug":"cve-2026-58149-joomdonation-events-booking-user-enumeration-in-joomla-extension","title":"JoomDonation Events Booking user enumeration in Joomla extension","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.017+00:00","url":"https://junglewise.ai/threats/cve-2026-58149-joomdonation-events-booking-user-enumeration-in-joomla-extension"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Joom Donation Events-Booking","slug":"events-booking","vendor":{"name":"Joom Donation","slug":"joom-donation","url":"https://junglewise.ai/threats/vendors/joom-donation"},"aliases":[],"category":"extension","homepage":"https://www.joomdonation.com/joomla-extensions/events-booking-joomla-event-registration.html","description":"An appointment and event registration extension for the Joomla content management system.","url":"https://junglewise.ai/threats/technologies/events-booking"},"most_severe":[{"cve":"CVE-2026-60024","cvss":5.3,"slug":"cve-2026-60024-joomdonation-events-booking-insecure-default-media-upload","title":"Joomdonation Events Booking insecure default media upload permissions","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.113+00:00","url":"https://junglewise.ai/threats/cve-2026-60024-joomdonation-events-booking-insecure-default-media-upload"},{"cve":"CVE-2026-63047","cvss":0,"slug":"cve-2026-63047-joomdonation-events-booking-improper-access-control-in-invoice","title":"Joomdonation Events Booking improper access control in invoice downloads","severity":"info","exploited":false,"published_at":"2026-07-22T08:16:23.95+00:00","url":"https://junglewise.ai/threats/cve-2026-63047-joomdonation-events-booking-improper-access-control-in-invoice"},{"cve":"CVE-2026-60025","cvss":0,"slug":"cve-2026-60025-joomdonation-events-booking-csrf-in-frontend-file-upload","title":"JoomDonation Events Booking CSRF in frontend file upload","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.23+00:00","url":"https://junglewise.ai/threats/cve-2026-60025-joomdonation-events-booking-csrf-in-frontend-file-upload"},{"cve":"CVE-2026-58149","cvss":0,"slug":"cve-2026-58149-joomdonation-events-booking-user-enumeration-in-joomla-extension","title":"JoomDonation Events Booking user enumeration in Joomla extension","severity":"info","exploited":false,"published_at":"2026-07-17T16:17:16.017+00:00","url":"https://junglewise.ai/threats/cve-2026-58149-joomdonation-events-booking-user-enumeration-in-joomla-extension"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}