Joomla Extension – joomlaeventmanager.net – Privileged remote code execution in Joomla Event Manager < 5.0.1 – The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution.
CRITICAL
Vulnerability intelligence
CVE-2026-77991
CVSS 4.09.4
SeverityCritical
Known exploitedNo
NVD references:
Primary source: NIST National Vulnerability Database