Threats tagged 'ghsa-4pgp-q6vx-cg62'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.4%	CVE-2026-77034joomlaeventmanager.net JEM – Joomla Event Manager extension for Joomla · Improper Access Control Medium6.9EPSS 0.4%2026-08-27CVE Database V5CVE-2026-77034 A vulnerability in the Joomla Event Manager (JEM) extension for Joomla allows unauthenticated users holding their own session token to overwrite and force-publish articles associated with events. This affects versions from 1.0.0 through 5.0.0. The issue is due to improper access control, classified as CWE-284. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. EPSS 0.4%Vulnerability CWE-284 #ghsa-4pgp-q6vx-cg62	CVE Database V5	2026-08-27

Page 1 of 1