CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
What the vulnerability does
Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager < 5.0.1 - Any visitor holding their own session token can republish and overwrite an article associated with an event.
Explanation of Vulnerability in Simple Terms
JEM - Joomla Event Manager contains an access control flaw that allows unauthenticated attackers to modify event data over the network. The vulnerability affects versions 1.0.0 through 5.0.0. No user interaction is required to exploit this issue. Site administrators should update to a patched version when available.
What an attacker can do
Modify event information without authentication.
Potential impact on your site
Attackers can alter or corrupt event details on your Joomla site without logging in.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
