Beveiligingsadvies

CVE-2026-77035

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-27 05:46:06

Laatst bijgewerkt 2026-08-28 07:43:42

Toegewezen door Joomla

CVSS-score 5.1

Status PUBLISHED

Beschrijving

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1 - A registered user with edit-own rights (the eventowner=1 setting or core.edit.own) can POST another user's record id together with their own id as created_by and take over that record.

← Alle CVE's bekijken Bekijk op cve.org ↗