CVE-2026-77989
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Aug 27, 2026
Vendor
unknown
Description
Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager < 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton() echoes it unescaped, leading to an reflected XSS vector.