CVE-2020-25026

—

CVSS 3.1

4.3 medium

EPSS

<1%p53

Published

Sep 2, 2020 (Sep 2, 2020)

Modified

Jun 17, 2026

Description

The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.

Vendors: derhansen
Products: event management and registration
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.