Security Advisory
CVE-2026-63047
7.5
HIGH
Vulnerability Description
Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.1 - The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information.
Published Date
July 22, 2026
Official Source
NIST NVD Advisory