Security Advisory

CVE-2026-77035

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-27 05:46:06

Last updated 2026-08-28 07:43:42

Assigner Joomla

CVSS score 5.1

State PUBLISHED

Description

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1 - A registered user with edit-own rights (the eventowner=1 setting or core.edit.own) can POST another user's record id together with their own id as created_by and take over that record.

← Browse all CVEs View on cve.org ↗