JEM - Joomla Event Manager extension for Joomla — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in JEM - Joomla Event Manager extension for Joomla, with AI-generated Chinese analysis, references, and POCs.

Vendor: joomlaeventmanager.net

CVE ID	Title	CVSS	Severity	Published
CVE-2026-77991	Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 CWE-434	9.4	Critical	2026-08-27
CVE-2026-77034	Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1 CWE-284	6.9	Medium	2026-08-27
CVE-2026-77990	Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager < 5.0.1 CWE-639	5.3	Medium	2026-08-27
CVE-2026-77035	Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1 CWE-639	5.1	Medium	2026-08-27
CVE-2026-77989	Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1 CWE-79	5.3	Medium	2026-08-27

All 5 known CVE vulnerabilities affecting JEM - Joomla Event Manager extension for Joomla with full Chinese analysis, references, and POCs where available.