Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-77991

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1

Description

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

joomlaeventmanager.net JEM - Joomla Event Manager extension for Joomla

Default version status: unaffected

  • 1.0.0-5.0.0affected

References