← CVE Intelligence

CVE-2025-49467

Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla PUBLISHED

Description (CNA)

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges.

Affected (CNA)

Vendor / productVersions
jevents.net / GWE Systems Ltd / JEvents component for Joomlaaffected 1.0.0-3.6.82; unaffected 3.6.82.1; affected 3.6.83-3.6.87

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.