Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: joomlaeventmanager.net Clear all filters
TI-2026-54265 CVE-2026-77990 · GHSA-839q-fphm-4fh3

Authorization bypass in joomlaeventmanager.net JEM - Joomla Event Manager extension for…

Priority LOW 24

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00351 Published 2026-08-27 No fix listed CWE-639
TI-2026-53814 CVE-2026-77035 · GHSA-chh3-v86w-gm49

Authorization bypass in joomlaeventmanager.net JEM - Joomla Event Manager extension for…

Priority LOW 23

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1 - A registered user with edit-own rights (the eventowner=1 setting or core.edit.o…

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00388 Published 2026-08-27 No fix listed CWE-639
TI-2026-54264 CVE-2026-77989 · GHSA-x373-x8fh-6pfh

Cross-site scripting in joomlaeventmanager.net JEM - Joomla Event Manager extension for…

Priority LOW 30

Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton() ec…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00436 Published 2026-08-27 No fix listed CWE-79