DP Calendar
by Joomla
CVEs (4)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-78071 | Hig | 0.49 | — | 0.00 | Aug 28, 2026 | Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission in DPCalendar. | ||
| CVE-2026-78070 | Med | 0.45 | — | 0.00 | Aug 28, 2026 | Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles. | ||
| CVE-2024-21727 | Med | 0.40 | 6.1 | 0.00 | Feb 15, 2024 | XSS vulnerability in DP Calendar component for Joomla. | ||
| CVE-2026-57831 | Hig | 0.00 | — | 0.00 | Jul 15, 2026 | Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2 - The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL injection. |
- risk 0.49cvss —epss 0.00
Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission in DPCalendar.
- risk 0.45cvss —epss 0.00
Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles.
- risk 0.40cvss 6.1epss 0.00
XSS vulnerability in DP Calendar component for Joomla.
- risk 0.00cvss —epss 0.00
Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2 - The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL injection.