Joomla Extension – joomlaeventmanager.net – Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1 – Any visitor holding their own session token can republish and overwrite an article associated with an event.
MEDIUM
Vulnerability intelligence
CVE-2026-77034
CVSS 4.06.9
SeverityMedium
Known exploitedNo
NVD references:
Primary source: NIST National Vulnerability Database