CVE-2025-69012: Stephen Harris Event Organiser

Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Stephen Harris Event Organiser event-organiser allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event Organiser: from n/a through <= 3.12.8.

Affected products

• Stephen Harris Event Organiser: up to and including 3.12.8

Published 2025-12-30. Last modified 2026-10-07.