← All advisories

Critical severity9.8NVD Advisory· Published Jan 30, 2018· Updated Jun 17, 2026

CVE-2018-6398

CVE-2018-6398

Description

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Cp Event Calendarinferred
Range: = 3.0.1
Package: https://wordpress.org/plugins/cp-event-calendar
Joomla/CP Event Calendarllm-create
Range: <=3.0.1

Patches

Vulnerability mechanics

References

1

www.exploit-db.com/exploits/43932/nvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.