Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

derhansen/sf_event_mgt

4 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high, 2 medium
Registry
Packagist

Advisories 4

  • CVE-2026-77128Medium 6.3

    Broken Access Control in extension "Event management and registration" (sf_event_mgt)

    Affected: from 9.0.0, fixed in 9.0.3; from 8.0.0, fixed in 8.6.2; from 7.0.0, fixed in 7.9.3; from 6.0.0, fixed in 6.7.2; fixed in 5.9.3.

  • Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

    Affected: from 9.0.0, fixed in 9.0.3; from 8.0.0, fixed in 8.6.2; from 7.0.0, fixed in 7.9.3; from 6.0.0, fixed in 6.7.2; fixed in 5.9.3.

  • CVE-2024-24751Medium 4.3

    Broken Access Control in Backend Module in sf_event_mgt

    Affected: from 7.0.0, fixed in 7.4.0.

  • The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information…

    Affected: fixed in 4.3.1; from 5.0.0, fixed in 5.1.1.