Read the docs

joomlaeventmanager.net

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

joomlaeventmanager.net records in CISA KEV

No joomlaeventmanager.net vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-54264 CVE-2026-77989 · GHSA-x373-x8fh-6pfh

Cross-site scripting in joomlaeventmanager.net JEM - Joomla Event Manager extension for…

Priority LOW 30

Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton() ec…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00436 Published 2026-08-27 No fix listed CWE-79
TI-2026-54265 CVE-2026-77990 · GHSA-839q-fphm-4fh3

Authorization bypass in joomlaeventmanager.net JEM - Joomla Event Manager extension for…

Priority LOW 24

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00351 Published 2026-08-27 No fix listed CWE-639
TI-2026-53814 CVE-2026-77035 · GHSA-chh3-v86w-gm49

Authorization bypass in joomlaeventmanager.net JEM - Joomla Event Manager extension for…

Priority LOW 23

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1 - A registered user with edit-own rights (the eventowner=1 setting or core.edit.o…

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00388 Published 2026-08-27 No fix listed CWE-639
Open these records in search →