Read the docs

digital-peak.com

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

digital-peak.com records in CISA KEV

No digital-peak.com vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-41649 CVE-2026-57831 · GHSA-r6gc-42q2-64m6

SQL injection in digital-peak.com DP Calendar extension for Joomla

Priority MEDIUM 44

Joomla Extension - digital-peak.com - Unauthenticated blind SQL injection in DP Calendar 8.18.0 - 10.11.2 - The Joomla extension DP Calendar is vulnerable to an unauthenticated SQL injection.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00401 Published 2026-07-15 No fix listed CWE-89
TI-2026-54306 CVE-2026-78071 · GHSA-32gf-548r-6r9c

Cross-site scripting in digital-peak.com DP Calendar extension for Joomla

Priority LOW 35

Joomla Extension - digital-peak.com - Authenticated, privileged stored XSS in DP Calendar 7.0.0-8.19.5, 9.0.0-10.12.0 - Location title is rendered in data attribute without escaping leads to XSS, needs create permission…

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00418 Published 2026-08-28 No fix listed CWE-79
TI-2026-54305 CVE-2026-78070 · GHSA-v6xp-fwh7-w4rv

SQL injection in digital-peak.com DP Calendar extension for Joomla

Priority LOW 31

Joomla Extension - digital-peak.com - Authenticated, privileged blind SQL injection in DP Calendar 5.5.0 - 10.11.2 - Saving an article can trigger a blind SQL injection with content plugin, needs update permission for ar…

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00369 Published 2026-08-28 No fix listed CWE-89
Open these records in search →