What’s Vulnerable › Vulnerabilities
CVE-2025-49467: Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla
- Severity: critical (CVSS 9.3 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-06-12 · updated 2026-06-17
- Weakness: CWE-89
Description
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges.
Affected products
- jevents.net / GWE Systems Ltd JEvents component for Joomla: 1.0.0-3.6.82, 3.6.83-3.6.87
References
Get alerted when CVE-2025-49467 or the next vulnerability affects your stack