CVE-2020-25026: Derhansen Event Management And Registration

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.

Affected products

• Derhansen Event Management And Registration: before 4.3.1 (fixed in 4.3.1); from 5.0.0, before 5.1.1 (fixed in 5.1.1)

Published 2020-09-02. Last modified 2026-06-17.