Vendor
Digital Peak.com
Products
2
CVEs
3
Across products
3
Status
Private
Products
2- 2 CVEs
- 1 CVE
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-78071 | Hig | 0.49 | — | 0.00 | Aug 28, 2026 | Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission in DPCalendar. | ||
| CVE-2026-78070 | Med | 0.45 | — | 0.00 | Aug 28, 2026 | Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles. | ||
| CVE-2024-21727 | Med | 0.40 | 6.1 | 0.00 | Feb 15, 2024 | XSS vulnerability in DP Calendar component for Joomla. |
- risk 0.49cvss —epss 0.00
Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission in DPCalendar.
- risk 0.45cvss —epss 0.00
Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for articles.
- risk 0.40cvss 6.1epss 0.00
XSS vulnerability in DP Calendar component for Joomla.