Security Advisory

CVE-2025-49467

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-06-12 15:18:32
Last updated 2025-06-12 15:52:20
Assigner Joomla
State PUBLISHED

Description

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges.