Skip to main content
mySites.guru
5+ live

Joomla extension security alerts (22 Aug) Fabrik 4.7.2ZOO: unauth RCEPhoca Cart: unauth SQLiJCE 2.9.99.10SP Page Builder RCE

JEM - Joomla Event Manager security vulnerabilities

mySites.guru tracks 1vulnerability in com_jem. Every connected Joomla site is checked against it on each audit, and flagged if it runs an affected version.

Check whether your sites are affected

What we check for

JEM - Joomla Event Manager (com_jem) below 5.0.1 - Unauthenticated Article Overwrite and Force-Publish, Cross-User Event and Venue Takeover, Reflected XSS and Attendee Data Disclosure

Affected versions: < 5.0.1

What we have written about JEM - Joomla Event Manager

Five Security Issues in JEM (Joomla Event Manager), and No Stable Fix Yet

mySites.guru found and reported multiple security issues in JEM (Joomla Event Manager), including an unauthenticated article overwrite. Five CVEs are assigned. There is no stable fix yet, so here is what to do.

Running JEM - Joomla Event Manager on a site you manage?

A free audit tells you which of your Joomla and WordPress sites run an affected version, which are out of date, and which have not been backed up. No card required. If a site is already compromised, fix.mysites.guru is a single fixed fee per incident, usually resolved the same day.

Rules current as of 24 August 2026.