Threats tagged 'ghsa-chh3-v86w-gm49'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.4%	CVE-2026-77035joomlaeventmanager.net JEM – Joomla Event Manager extension for Joomla · Insecure Direct Object Reference Medium5.1EPSS 0.4%2026-08-27CVE Database V5CVE-2026-77035 A vulnerability in the Joomla Event Manager (JEM) extension for Joomla allows a registered user with edit-own rights to take over other users' event and venue records by submitting forged form fields. This affects versions 1.0.0 through 5.0.0 of the extension. The issue involves authorization bypass through user-controlled keys, enabling cross-user event and venue takeover. EPSS 0.4%Vulnerability CWE-639 #ghsa-chh3-v86w-gm49	CVE Database V5	2026-08-27

Page 1 of 1