What is GHSA-chh3-v86w-gm49?

GHSA-chh3-v86w-gm49 is a security advisory published by GitHub Security Advisories with Medium severity. Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged...

Which CVE IDs does GHSA-chh3-v86w-gm49 cover?

GHSA-chh3-v86w-gm49 covers the following CVE IDs: CVE-2026-77035. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-chh3-v86w-gm49Medium

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged...

Vendor

GitHub Security Advisories

Published

August 27, 2026

Last Modified

August 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-77035 →

📋 Description

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager < 5.0.1 - A registered user with edit-own rights (the eventowner=1 setting or core.edit.own) can POST another user's record id together with their own id as created_by and take over that record.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-77035
https://www.joomlaeventmanager.net
https://github.com/advisories/GHSA-chh3-v86w-gm49