Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-77034 EUVD-2026-66865GHSA-4pgp-q6vx-cg62

Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1

Published Aug 27, 2026 · Updated Aug 28, 2026 · Assigned by Joomla

Description

Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1 - Any visitor holding their own session token can republish and overwrite an article associated with an event.

Affected products

VendorProductAffectedFixed
joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla 1.0.0-5.0.0 —

References