CVE-2025-49467 Information

Jun 13, 2025 cve

Description

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges.

Reference

https://jevents.net/

CNNVD-202506-1691 (Published: 2025-06-12)

Share on: