HIGH 7.0 NVD

CVE-2026-97164

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extension < 6.5.0 - Using the `images` parameter

Joomla Extension - svenbluege.de - Authenticated arbitrary path deletion in `clear cache` task in Event Gallery extension < 6.5.0 - Using the `images` parameter of the `cache.process` task, you can recursively delete any directories that the web server is authorized to write to.

References

https://www.svenbluege.de/

Published: 2026-09-27 · Source: NVD · Feed updated: 2026-09-27

This high severity vulnerability with a CVSS score of 7.0 was published on 2026-09-27 via NVD.

vulnfeed aggregates 11720 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.