Back to the CVE list

CVE-2026-77990

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1

CVSS score

5.3

EPSS probability

%0.4

Risk score

0.0

Published

1 mo ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.4

CVE-2026-77991Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1

Vendorjoomlaeventmanager.net ProductJEM - Joomla Event Manager extension for Joomla

Patch status unknownEPSS %11 mo ago

6.9

CVE-2026-77034Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1

Vendorjoomlaeventmanager.net ProductJEM - Joomla Event Manager extension for Joomla

Patch status unknownEPSS %01 mo ago

5.3

CVE-2026-77989Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1

Vendorjoomlaeventmanager.net ProductJEM - Joomla Event Manager extension for Joomla

Patch status unknownEPSS %01 mo ago

5.1

CVE-2026-77035Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1

Vendorjoomlaeventmanager.net ProductJEM - Joomla Event Manager extension for Joomla

Patch status unknownEPSS %01 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-77990"