2 matches found
CVE-2026-77989
Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton echoes it unescaped, leading to an reflected XSS vector...
6.3CVSS5.8AI score0.00436EPSS
SaveExploits0References1
CVE-2026-77989: Improper Neutralization of Input During Web Page Generation
Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton echoes it unescaped, leading to an reflected XSS vector...
5.3CVSS5.8AI score0.00436EPSS
SaveExploits0References2
20