VULNERABILITY INTELLIGENCE
CVE-2025-49467
EPSS probability0.32%
CISA KEVNot currently listed
Published2025-06-12
Last modified2026-06-17
Description
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges.
Weakness classification
- security@joomla.org: CWE-89