CVE-2026-77034
CVE-2026-77034
Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1 - Any visitor holding their own session token can republish and overwrite an article associated with an event.
EPSS: 0.002 (14.8th percentile) — read the EPSS interpretation.
Weakness classification (CWE)
References
- security@joomla.org (product)