Arbitrary file upload in Joomlaeventmanager.net Jem - Joomla Event Manager Extension For

CVE-2026-77991

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution.

Vulnerability class: Unrestricted File Upload

EPSS: 0.004 (34.4th percentile) — read the EPSS interpretation.