Advisories · Technology

Mobile Events Manager.

Every CVE that names Mobile Events Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-88801 CVE record

CVSS 8.0 High

MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Stored XSS via Role Creation
- MDJM Event Management
- Mobile Events Manager
- Cross-site scripting (XSS)
Not analysed yet 6 Nov 2026
CVE-2026-88800 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Unauthenticated Arbitrary Role Deletion
- MDJM Event Management
- Mobile Events Manager
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-88799 CVE record

CVSS 8.8 High

MDJM Event Management and Mobile Events Manager <= 1.7.8.7 - Subscriber+ Account Takeover via IDOR
- MDJM Event Management
- Mobile Events Manager
- Broken access control
Not analysed yet 6 Nov 2026
CVE-2026-88802 CVE record

CVSS 7.5 High

MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion
- MDJM Event Management
- Mobile Events Manager
- Broken access control
Not analysed yet 13 Sept 2026
CVE-2022-1194 CVE record

Mobile Events Manager < 1.4.8 - Admin+ CSV Injection
- Mobile Events Manager
- Other injection
Not analysed yet 16 Sept 2022
CVE-2021-25049 CVE record

Mobile Events Manager < 1.4.4 - Admin+ Stored Cross-Site Scripting
- Mobile Events Manager
- Cross-site scripting (XSS)
Not analysed yet 24 Jan 2022