Known vulnerabilities in JEvents

Vendor: GWE Systems Ltd.
Software: JEvents
Software CPE: cpe:2.3:a:gwe_systems:jevents:*:*:*:*:*:joomla:*:*
Website: https://www.jevents.net
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting JEvents JEvents is affected by 2 known vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17995 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Medium
No
No
 4.4.50 17.03.2019 SB2019031701
#VU17994 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 Medium
No
No
 4.4.50 17.03.2019 SB2019031701