Advisories · Technology
joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla.
Every CVE that names joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1
- joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla
- Unrestricted file upload
- CVSS 6.9 Medium
Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1
- joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla
- Broken access control
- CVSS 5.3 Medium
Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1
- joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla
- Broken access control
- CVSS 5.1 Medium
Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1
- joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla
- Broken access control
- CVSS 5.3 Medium
Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1
- joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla
- Cross-site scripting (XSS)