Event Manager, 2.1.4 and below, SQLi and Unrestricted File Upload

Fixed in version 2.1.4.2

Notice: http://www.joomlaeventmanager.net/project/changelog-jem-2

Please contact the developer for more information