TYPO3-EXT-SA-2026-023: Broken Access Control in extension "Event management and registration" (sf_event_mgt)

PKSA-zn9v-7dk7-9n62 CVE-2026-77128

Affected version: >=9.0.0,<9.0.3|>=8.0.0,<8.6.2|>=7.0.0,<7.9.3|>=6.0.0,<6.7.2|<5.9.3

Reported by:
FriendsOfPHP/security-advisories

TYPO3-EXT-SA-2026-023: Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)

PKSA-xn4n-zch1-3zsy CVE-2026-77129

Affected version: >=9.0.0,<9.0.3|>=8.0.0,<8.6.2|>=7.0.0,<7.9.3|>=6.0.0,<6.7.2|<5.9.3

Reported by:
FriendsOfPHP/security-advisories

[MEDIUM] derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module

PKSA-fsym-sxqs-8qwh CVE-2024-24751 GHSA-4576-pgh2-g34j

Affected version: >=7.0.0,<7.4.0

Reported by:
GitHub

[MEDIUM] Information Disclosure in TYPO3 extension sf_event_mgt

PKSA-hpr3-98g8-d6sp CVE-2020-25026 GHSA-g8rg-7rpr-cwr2

Affected version: >=5.0.0,<5.1.1|<4.3.1

Reported by:
GitHub